1437 matches found
CVE-2007-4042
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte %00 and shell metacharacters in a 1 mailto, 2 nntp, 3 news, 4 snews, or 5 telnet URI, a similar issue to CVE-2007-3670...
CVE-2007-4042: Undefined Security Weakness
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte %00 and shell metacharacters in a 1 mailto, 2 nntp, 3 news, 4 snews, or 5 telnet URI, a similar issue to CVE-2007-3670...
Multiple Browsers - URI Handlers Command Injection
source: https://www.securityfocus.com/bid/25053/info Multiple browsers are prone to vulnerabilities that let attackers inject commands through various protocol handlers. Exploiting these issues allows remote attackers to pass and execute arbitrary commands and arguments through processes such as...
Remote Command Exec (FireFox 2.0.0.5 et al)
By: Nate McFeters nate dot mcfeters -at- gmail Billy BK Rios billy dot rios -at- gmail Tested in FireFox 2.0.0.5 and 3.0a6, Netscape Navigator 9, and Mozilla browser. NOTE These examples were created for WinXP SP2 with no external mail programs installed outlook, notes…etc. If you have an externa...
[Full-disclosure] More URI Handling Vulnerabilites (FireFox Remote Command Execution)
Internet Explorer has received a lot of attention lately for the way it handles requests for external URIs.... Nate and I have warned that IE isn't the only browser with URI handling issues.... I've posted a PoC for remote command execution in Firefox 2.0.0.5, Netscape Navigator 9, and mozilla at...
Microsoft Internet Explorer and Mozilla Firefox URI Handler Command Injection Vulnerability
Description Microsoft Internet Explorer, Mozilla Firefox and Netscape Navigator are prone to a vulnerability that lets attackers inject commands through the 'firefoxurl' and 'navigatorurl' protocol handlers. Exploiting these issues allows remote attackers to pass and execute arbitrary commands an...
CVE-2007-2200: Undefined Security Weakness
Directory traversal vulnerability in navigator/navigatorok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. dot dot in the asolute parameter...
Deleting a custom field which has an issue security scheme or permission scheme on it does not update the index and issue navigator is out of date
emphasized textSimilar to JRA-12410 - deleting a custom field does not adequately clean up after itself. Specifically, affected issues are not reindexed so the updated security and permission aspects are not reflected in search results which is a security hole. Note that a naive fix may produce...
Deleting a custom field which has an issue security scheme or permission scheme on it does not update the index and issue navigator is out of date
emphasized textSimilar to JRA-12410 - deleting a custom field does not adequately clean up after itself. Specifically, affected issues are not reindexed so the updated security and permission aspects are not reflected in search results which is a security hole. Note that a naive fix may produce...
CVE-2007-1143
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2007-1144
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2007-1143
CVE-2007-1143 describes a directory traversal vulnerability in pn-menu.php of J-Web Pics Navigator 1.0. The flaw allows remote attackers to list arbitrary directories by supplying a .. sequence in the dir parameter. Documents consistently identify this as a directory traversal risk with impact on...
CVE-2007-1143
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2007-1144
CVE-2007-1144 describes a directory traversal vulnerability in J-Web Pics Navigator 2.0, specifically in jwpn-photos.php where a dot-dot (“..”) in the dir parameter allows remote listing of arbitrary directories. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, low at...
CVE-2007-1144: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
CVE-2007-1143: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...
pics-traverse.txt
Pics Navigator Directory Traversal Vulnerability By : sn0oPy Risk : medium site : http://www.jeunes-webmasters.com/ Dork : "Powered by J-Web Pics Navigator v2.0" | inurl:"jwpn-photos.php" | exploit : for the v1.0 http://www.target/gallery directory/pn-menu.php?ret=Pics%20Navigator&dir=../../../ f...
Pics Navigator Directory Traversal Vulnerability
Pics Navigator Directory Traversal Vulnerability By : sn0oPy Risk : medium site : http://www.jeunes-webmasters.com/ Dork : "Powered by J-Web Pics Navigator v2.0" | inurl:"jwpn-photos.php" | exploit : for the v1.0 http://www.target/gallery directory/pn-menu.php?ret=Pics20Navigator&dir=../../../ fo...
Apple QuickTime Plug-In Arbitrary Script Execution Weakness
Description Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load local content in a user's browser. Althoug...
Mozilla Firefox JavaScript Navigator object vulnerability
Added: 08/14/2006 CVE: CVE-2006-3677 BID: 19192 OSVDB: 27559 Background When used in a web page, Java references properties of the window.navigator object as it starts up in Firefox or SeaMonkey. Problem If a web page replaces the navigator object before starting Java, then the page could cause t...