6589 matches found
A-Blog.txt
1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...
CVE-2006-5135: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...
CVE-2006-5092: Undefined Security Weakness
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...
A-Blog v2.0 Remote File Include
============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...
A-Blog 2.0 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...
A-Blog 2.0 - Multiple Remote File Inclusions
A-Blog 2.0 - Multiple Remote File Inclusions ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous...
A-Blog 2.0 Multiple Remote File Include Vulnerabilities
No description provided by source. ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...
A-Blog 2.0 - 'menu.php' Remote File Inclusion
ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigation/ Exempe Of ExPloit is:...
CVE-2006-3640
CVE-2006-3640 is an Information Disclosure vulnerability in Microsoft Internet Explorer (IE 5.01 and 6) where a script can persist across navigations to reveal the window location in another domain/IE zone. The NVD description matches a Window Location Information Disclosure Vector, and the conne...
Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation
Yahoo! Messenger 7.07.5 - Remote Search String Arbitrary Browser Navigation source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary...
Yahoo! Messenger 7.0/7.5 - Remote Search String Arbitrary Browser Navigation
source: https://www.securityfocus.com/bid/19211/info Yahoo! Messenger is prone to a browser-navigation vulnerability that may permit a remote attacker to open a browser window on the victim user's computer to an arbitrary page. This issue occurs because the application fails to sanitize malicious...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the 1 sDeviceView or 2 nDeviceID parameter to a NmConsole/Navigation.asp or 3 sHostname parameter to b...
security flaw
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...
DEBIAN-CVE-2006-1740
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
CVE-2005-3762
SQL injection vulnerability in the navigation module navigationmodule in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter...
Exponent CMS < 0.96.4 Multiple Remote Vulnerabilities (XSS, SQLi, Code Exe, Disc)
The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to sanitize input to the 'id' parameter of the resource module before using it in database queries. An unauthenticated attacker can...
[SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 891-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2005 http://www.debian.org/security/faq -...
DSA-891-1 gpsdrive - format string
Bulletin has no description...
[Full-disclosure] DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability'
DMA2005-1104a - 'GpsDrive friendsd2 format string vulnerability' Author: Kevin Finisterre Vendor: http://www.gpsdrive.cc/ Product: 'GpsDrive' References: http://www.digitalmunition.com/DMA2005-1104a.txt Description: GpsDrive is a car bike, ship, plane navigation system. It can display positioning...