213 matches found
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
Mail support request accepts any e-mail address
The SupportUtility allows the user to enter an arbitrary e-mail address to send a copy of the e-mail to. This issue removes the option for users to enter an e-mail address to CC. This issue also introduces a flag that prevents the TO address from being changed through the web interface. By defaul...
Mail support request accepts any e-mail address
The SupportUtility allows the user to enter an arbitrary e-mail address to send a copy of the e-mail to. This issue removes the option for users to enter an e-mail address to CC. This issue also introduces a flag that prevents the TO address from being changed through the web interface. By defaul...
Novell GroupWise Internet Agent e-mail address buffer overflow
Added: 06/05/2009 CVE: CVE-2009-1636 BID: 35064 OSVDB: 54645 Background Novell GroupWise is an e-mail and collaboration product suite. Problem A buffer overflow vulnerability allows a remote attacker to execute arbitrary commands by sending a message containing a specially crafted e-mail address ...
dvbbs delete the upload. inc after the shell was a method-vulnerability warning-the black bar safety net
dvbbs delete the upload. inc after the shell was a method - the premise is to give the front Desk administrative privileges Into the background after Go to the user management Just change the personal e-mail address for %eval requestchr3 5%@163.com After saving Find the mail list export Then expo...
Novell GroupWise buffer overflow
Novell GroupWise Internet Agent SMTP e-mail address buffer overflow...
SA-CONTRIB-2009-026 - LoginToboggan - Access bypass
LoginToboggan includes a setting which, if enabled, allows users to log in using either their username or e-mail address. In some circumstances, previously blocked users may still be able to access the site if this setting is enabled. Versions affected LoginToboggan 6.x-1.x prior to 6.x-1.5...
Job Script 2.0 Arbitrary Change Admin Password Exploit
No description provided by source. head titleJob Script V2.0 - Job Board Software change pasword admin /title /head /head body div id="page" div id="middle" div class="center" table width=100% cellspacing=15 tr td width="223"badmin :/b/[email protected]/td /tr /table body div id="page" div...
Job Script 2.0 - Arbitrary Change Admin Password
Job Script V2.0 - Job Board Software change pasword admin admin :[email protected] Change password Cod3d By:TiGeR-dZ ;Script:Job Script V2.0 - Job Board Software Download:http://www.jobscript.net/job-board-software/ Mail:[email protected] milw0rm.com 2009-05-07...
CVE-2008-6567
Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...
CVE-2008-6567
Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...
CVE-2009-0743
Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...
CVE-2009-0743
Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...
Cisco Unified MeetingPlace视频会议系统E-Mail Address字段远程跨站脚本漏洞
BUGTRAQ ID: 33915 Cisco Unified MeetingPlace是思科的网络会议解决方案。 Unified MeetingPlace允许用户修改自己的帐号设置，如名称、电话分机、邮件地址等。如果用户在配置文件页面设置了特制的E-mail Address字段的话，则其他用户在查看该用户的配置文件或该用户所创建会议的详细信息时就会导致跨站脚本攻击，在浏览器会话中执行所嵌入的恶意代码。 Cisco Unified MeetingPlace 7.0 Cisco Unified MeetingPlace 6.0 厂商补丁： Cisco -----...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...
CVE-2007-3928
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...
comicsense-sql.txt
Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...
CVE-2006-5875
eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...
Debian DSA-905-1 : mantis - several vulnerabilities
Several security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3091 A cross-site scripting vulnerability allows attackers to inject arbitrary web script or HTML. -...