4884 matches found
A-Blog v2.0 Remote File Include
============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...
A-Blog 2.0 - Multiple Remote File Inclusions
A-Blog 2.0 - Multiple Remote File Inclusions ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous...
A-Blog 2.0 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...
A-Blog 2.0 Multiple Remote File Include Vulnerabilities
No description provided by source. ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...
A-Blog 2.0 - 'menu.php' Remote File Inclusion
ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigation/ Exempe Of ExPloit is:...
CVE-2006-3640
CVE-2006-3640 is an Information Disclosure vulnerability in Microsoft Internet Explorer (IE 5.01 and 6) where a script can persist across navigations to reveal the window location in another domain/IE zone. The NVD description matches a Window Location Information Disclosure Vector, and the conne...
Yahoo! Messenger 7.0/7.5 - Remote Search String Arbitrary Browser Navigation
source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary page. This issue occurs because the application fails to sanitize malicious...
Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation
Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the 1 sDeviceView or 2 nDeviceID parameter to a NmConsole/Navigation.asp or 3 sHostname parameter to b...
security flaw
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...
DEBIAN-CVE-2006-1740
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
Exponent CMS < 0.96.4 Multiple Remote Vulnerabilities (XSS, SQLi, Code Exe, Disc)
The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to sanitize input to the 'id' parameter of the resource module before using it in database queries. An unauthenticated attacker can...
[SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 891-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2005 http://www.debian.org/security/faq -...
DSA-891-1 gpsdrive - format string
Bulletin has no description...
[Full-disclosure] DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability'
DMA2005-1104a - 'GpsDrive friendsd2 format string vulnerability' Author: Kevin Finisterre Vendor: http://www.gpsdrive.cc/ Product: 'GpsDrive' References: http://www.digitalmunition.com/DMA2005-1104a.txt Description: GpsDrive is a car bike, ship, plane navigation system. It can display positioning...
security flaw
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...