CVE-2006-2658

Directory traversal vulnerability in the xsp component in modmono in Mono/C web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. dot dot sequence in an HTTP request...

CVE-2006-2658

CVE-2006-2658 describes a directory traversal vulnerability in the xsp component of mod_mono (Mono/C# web server). It affects SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allowing remote attackers to read arbitrary files via a .. sequence in an HTTP request. Connected sources co...

CVE-2006-2658

Directory traversal vulnerability in the xsp component in modmono in Mono/C web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. dot dot sequence in an HTTP request...

CVE-2006-2658

Directory traversal vulnerability in the xsp component in modmono in Mono/C web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. dot dot sequence in an HTTP request...

CVE-2006-2658: Undefined Security Weakness

Directory traversal vulnerability in the xsp component in modmono in Mono/C web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. dot dot sequence in an HTTP request...

CVE-2006-2504

Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search and 2 cate parameters to a list.asp, and the 3 id and cate parameters to b adminok.asp...

CVE-2006-2504

Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search and 2 cate parameters to a list.asp, and the 3 id and cate parameters to b adminok.asp...

CVE-2006-2504

CVE-2006-2504 affects mono AZBOARD 1.0 and earlier. The issue is multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via (1) search and (2) cate parameters to list.asp, and (3) id and cate parameters to admin_ok.asp. The connected documents provide t...

CVE-2006-2504: Undefined Security Weakness

Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search and 2 cate parameters to a list.asp, and the 3 id and cate parameters to b adminok.asp...

DEBIAN-CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0509

CVE-2005-0509 : The connected documents confirm a vulnerability in the Mono 1.0.5 implementation of ASP.NET (.Net) where Unicode representations for ASCII fullwidth characters (e.g., that are converted to normal ASCII like ">" and "

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and aris...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and arise when Mono converts Unicode characters ranging from U+ff00-U+ff60 to ASCII. Mono 1.0.5 ...

CVE-2005-0509: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

XSS vulnerabilty in ASP.Net [with details]

In August 2004 I found XSS vulnerability in Microsoft ASP.Net, and now I publish it. Full details: En: http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml Ru: http://it-project.ru/andir/docs/aspxvuln/aspxvuln.ru.xml P.S. I to present my appologies for bad english : My native language is...