JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

Professional Site Immobiliare SQL Injection

============ Advisory 25/08/2010 ============= Professional Site Immobiliare Multiple vulnerabilities Vendor's Description of Software: http://www.sitomastro.com Application Info: Name: Professional Site Immobiliare =============================================== Vulnerability Info: Type: SQL...

CorelDRAW X3 13.0.0.576 DLL Hijacking Exploit

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc...

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking / Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL...

Corel PHOTO-PAINT X3 v13.0.0.576 DLL Hijacking Exploit (crlrib.dll)

Exploit for windows platform in category local exploits =================================================================== Corel PHOTO-PAINT X3 v13.0.0.576 DLL Hijacking Exploit crlrib.dll =================================================================== / Corel PHOTO-PAINT X3 v13.0.0.576...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking (dwmapi.dll)

Exploit for windows platform in category local exploits ===================================================================== Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking dwmapi.dll ===================================================================== / Adobe ExtendedScript Toolkit CS...

Adobe Extension Manager CS5 5.0.298 - dwmapi.dll DLL Hijacking

Adobe Extension Manager CS5 5.0.298 - dwmapi.dll DLL Hijacking / Adobe Extension Manager CS5 v5.0.298 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v5.0.298 Summary: Easily install new extensions and manage the ones you...

ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-08-18-1 ------------------------------------------------------------------------- ASPR 2010-08-18-1: Remote Binary Planting in Apple iTunes for Windows...

Xion Player 1.0.125 - Local Stack Buffer Overflow

Xion Player 1.0.125 - Local Stack Buffer Overflow !/usr/bin/python Title: Xion 1.0.125 Stack Buffer Overflow Date: August 13, 2010 Author: corelanc0d3r and dijital1 Grtz to dijital1 : I had a lot of fun working with you on this one ! : Grtz to dookie2000ca : Original Advisory:...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

SigPlus Pro 3.74 - ActiveX LCDWriteString Remote Buffer Overflow JIT Spray ASLR + DEP Bypass !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass...

Web Professional (default.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Web Professional default.php SQL Injection Vulnerability ==========================================================...

Joomla Component com_fireboard Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= Joomla comfireboard Persistent XSS Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

NTSOFT BBS E-Market Professional = XSS / Remote Execution Code

+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...

Bs Auction Script SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs Auction Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author : Sid3^effects aKa Ha...

NTSOFT BBS E-Market Professional Cross Site Scripting

+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...