6415 matches found
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
Exponent CMS < 0.96.4 Multiple Remote Vulnerabilities (XSS, SQLi, Code Exe, Disc)
The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to sanitize input to the 'id' parameter of the resource module before using it in database queries. An unauthenticated attacker can...
[SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 891-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2005 http://www.debian.org/security/faq -...
DSA-891-1 gpsdrive - format string
Bulletin has no description...
[Full-disclosure] DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability'
DMA2005-1104a - 'GpsDrive friendsd2 format string vulnerability' Author: Kevin Finisterre Vendor: http://www.gpsdrive.cc/ Product: 'GpsDrive' References: http://www.digitalmunition.com/DMA2005-1104a.txt Description: GpsDrive is a car bike, ship, plane navigation system. It can display positioning...
security flaw
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
CVE-2005-2263
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...
Xerox Document Centre MicroServer Web Server Directory Navigation Crafted URL DoS (XRX05-004)
According to its model number and software version, the remote host is a Xerox Document Centre or WorkCentre device with an embedded web server that is prone to remote denial of service attacks. Specifically, memory on the affected device can become corrupted, triggering a crash and restart, when...
CVE-2004-0843
Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...
CVE-2004-0843
CVE-2004-0843 is a Plug-in Navigation Address Bar Spoofing vulnerability in Internet Explorer (IE 5.01/5.5/6 families). A remote attacker could cause the address bar to show a URL different from the loaded page via plug‑ins, enabling phishing-like deception. The connected OpenVAS entries confirm ...
CVE-2004-0843
Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...
CVE-2004-0843: Undefined Security Weakness
Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...
Microsoft Internet Explorer does not properly handle navigations from plug-ins
Overview Microsoft Internet Explorer contains a vulnerability in its handling of navigation commands from plug-ins. This could let an attacker spoof the address of a website. Description Microsoft Internet Explorer improperly handles navigations from plug-ins, such as ActiveX controls. This...
parachat55.txt
Donato Ferrante Application: ParaChat Server http://www.parachat.com/ Version: 5.5 Bug: directory traversal Date: 28-Sep-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description...
MSIE->BodyRefreshLoadsJPU:refresh is a new navigation method
BodyRefreshLoadsJPU:refresh is a new navigation method tested Browser Ver MS Internet Explorer: 6.0.2600.0000.xpclntqfe.021108-2107; Encryption: 128-bit; Patch:; Q810847; So, it's far from fully patched. It also works after applying the patch for method caching attack. OS Ver: "Windows XP Cn ver"...
"netscape navigator" is cracked.
Readers' Favorite - Make Notes in Your Browser today! http://liudieyuinchina.vip.sina.com/domex/aPoP/ http://domex.int.tc/ "netscape navigator" is cracked. "that's all" is end of file if you are in a hurry tested OS:Windows Server 2003 Enterprise Browser: "Netscape Navigator 7.02" "Mozilla/5.0...
[LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware
LoWNOISE "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware by Efrain 'ET' Torres, Colombia 2002. [email protected] +Disclaimer: blah. +Product: -SunONE Starter Kit v2.0 Sun Microsystems CD-ROM Version -ASTAware SearchDisk 2002. ASTAWARE Technologies Inc. +Introduction You are one of...