413 matches found
Sql injection
SQL injection vulnerability in the MailTo aka commailto component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor...
CVE-2009-1499
The CVE-2009-1499 entry describes an SQL injection in the Joomla! MailTo (com_mailto) component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php, indicating a remote‑code capable injection affecting the application’s database quer...
CVE-2009-1499
SQL injection vulnerability in the MailTo aka commailto component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor...
Joomla Component MailTo (article) SQL Injection Vulnerability
No description provided by source. Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto"...
Joomla MailTo SQL Injection
Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit /index.php?option=commailto&tmpl=mailto&article=SQL&Itemid=1 Example...
Joomla Component MailTo (article) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Joomla Component MailTo article SQL Injection Vulnerability ============================================================= Joomla Component MailTo SQL Injection Vulnerability...
Joomla! Component MailTo - article SQL Injection
Joomla! Component MailTo - article SQL Injection Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...
Joomla! Component MailTo - 'article' SQL Injection
Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit...
CVE-2008-5839
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...
Buffer overflow
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...
CVE-2008-5839
CVE-2008-5839 describes a buffer overflow in FoxMail Client (FoxMail 6.5) triggered by a long mailto URI in the HREF attribute of an A element, allowing remote code execution. Affected component: FoxMail Client; root cause: improper handling/overflow in mailto URI parsing. Impact: potential arbit...
CVE-2008-5839
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attribute of an A element...
opera-xssexecpoc.txt
bb var z=null; function x window.setTimeout"z=window.open'opera:historysearch?q=%2A';window.focus;",1500; window.setTimeout"z.close;",3000; window.setTimeout"location.href='mailto:'",3000; " onclick="x"Click me... s=document.createElement"IFRAME"; s.src="opera:config"; document.body.appendChilds;...
CVE-2008-4103
The mailto aka commailto component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam...
CVE-2008-4103
The mailto aka commailto component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam...
[20080903] - Core - com_mailto Spam
The mailto component does not verify validity of the URL prior to sending...
Google Talk http和mailto远程代码注入漏洞
BUGTRAQ ID: 29946 Google Talk是一款流行的即时通讯软件，允许直接与其他的计算机用户进行语音对话。 GTalk没有正确地验证用户在聊天对话窗口中所提交的http和mailto，如果可信任的联系人在对话窗口中提交了特制的URL或mailto地址的话，就会导致在对方的机器上注入并执行HTML代码，或执行跨站脚本攻击。 Google Talk 1.0.0.105 Google ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.google.com http://"h1Lostmon/h1...
gtalk-inject.txt
Gtalk 1.0.0.105 html injection and Stealing messages Vendor url:http://www.google.com Advisore:http://lostmon.blogspot.com/2008/06/ gtalk-100105-html-injection-and.html Vendor notify:yes exploit available:yes GTalk is a service offered by Google instant messaging. It allows communication via...
Inappropriate interpretation of mailto URL scheme by mail client software
Overview The mailto URL scheme is used to designate the Internet email address on a web page. Specifying an email address and body text using the mailto URL scheme gives a template for a mail message. Many mail clients have a function to set a field specified by the mailto URL scheme in a mail...