CVE-2012-1630

The CVE-2012-1630 issue concerns Drupal’s contributed module Taxonomy Navigator , where an XSS flaw could allow remote authenticated users with certain permissions to inject script/HTML via vectors not specified in the document. The vulnerability’s impact, per available data, includes partial int...

CVE-2012-1630

Cross-site scripting XSS vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

XSS vulnerability in chart saving

Create a new dashboard with the name alert"XSS" 2. Go to the issue navigator and perform a search 3. Choose Views - charts - Save to dashboard This is because portal.name is unescaped in savetodashboard.vm. Tested in OnDemand and BTF...

SA-CONTRIB-2012-006 XSS and CSRF in Multiple Modules - Supercron, Taxotouch, Admin:hover, Taxonomy Navigator no longer supported

CVE: CVE-2012-1628 SuperCron is a complete replacement for Drupal's built-in Cron functionality. The module is vulnerable to Cross Site Scripting. The vulnerability is mitigated by an attacker needing to gain an account with "access administration pages" permission. CVE: CVE-2012-1629 Taxotouch...

Windows Gather FTP Navigator Saved Password Extraction

This module extracts saved passwords from the FTP Navigator FTP client. It will decode the saved passwords and store them in the database. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Window...

Mozilla Dangling pointer vulnerability using DOM plugin array (MFSA 2010-51)

The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service...

Mozilla Dangling pointer vulnerability using DOM plugin array (MFSA 2010-51)

The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service...

Mozilla Dangling pointer vulnerability in nsPluginArray

Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of servi...

Netscape Navigator v9.0.0.6 (marquee) Denial of Service PoC

Exploit for windows platform in category dos / poc =========================================================== Netscape Navigator v9.0.0.6 marquee Denial of Service PoC =========================================================== Title:Netscape Dos Exploit v9.0.0.6 EDB-ID: CVE-ID: OSVDB-ID: Author...

VulnCheck KEV: CVE-2006-3677

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object window.navigator that are accessed when Java starts up, which causes a crash that leads to code execution...

Mozilla Firefox < 3.0.19 Multiple Vulnerabilities

Binary data 801260.prm...

Netscape Navigator - Namoroka - Flock <= URL Code Execution Exploit

Exploit for unknown platform in category remote exploits =================================================================== Netscape Navigator - Namoroka - Flock firelinking By eidelweiss var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"linux" ...

Netscape Navigator 9 Remote Local DOS exploit

Exploit for unknown platform in category dos / poc ============================================= Netscape Navigator 9 Remote Local DOS exploit ============================================= \n" File.write"\n" Bof = 'A'66666 File.write"alert'"+Bof+"'\n" File.write"\n" File.write"" File.close --...

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability

No description provided by source. Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=She...

Remote file inclusion

PHP remote file inclusion vulnerability in appandreadme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-2641

PHP remote file inclusion vulnerability in appandreadme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-2641

CVE-2009-2641 describes a PHP remote file inclusion vulnerability in School Data Navigator’s app_and_readme/navigator/index.php. An attacker can cause arbitrary PHP code execution by supplying a crafted URL in the page parameter, and may also include and execute local files via .. sequences. Affe...

CVE-2009-2641

PHP remote file inclusion vulnerability in appandreadme/navigator/index.php in School Data Navigator allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

School Data Navigator (page) Local/Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...

School Data Navigator Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...