CVE-2007-0412: Undefined Security Weakness

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files...

CVE-2007-0371

A certain ActiveX control in the Common Controls Replacement Project CCRP CCRP BrowseDialog Server ccrpbds6.dll allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long CCRPBDc.SelectedFolder property value...

CVE-2006-6708

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-6709

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6708

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-6709

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6708

CVE-2006-6708 describes a cross-site scripting (XSS) vulnerability in MGinternet Property Site Manager, specifically in the listings.asp handler. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the s parameter. The available documents do not provid...

CVE-2006-6709

CVE-2006-6709 affects MGinternet Property Site Manager. The NVD description identifies multiple SQL injection vulnerabilities in this product, exploitable via input parameters: (1) p to detail.asp; (2) l, (3) typ, (4) loc to listings.asp; and (5) Password or (6) Username to admin_login.asp. Root ...

CVE-2006-6709: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6708: Undefined Security Weakness

Cross-site scripting XSS vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Multiple Mozilla Firefox / Thunderbird / Seamonkey security vulnerabilities

Crossite scripting with functions prototypes. Information leak. Buffer overflows on oversized Content-Type fields in messages. Memory corruption on SVG header. Crossite scripting with img.src. DoS. JavaScript watchpoint privilege escalation. CSS image cursor property buffer overflow. Multiple...

CSS cursor image buffer overflow (Windows only) — Mozilla

Frederik Reiss reported a crash when using the CSS cursor property to set the cursor to certain images on Windows. A miscalculated size during conversion of the image to a Windows bitmap can result in a heap buffer overflow which could be used to compromise the victim's computer...

klf-realty [injection sql]

vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

CVE-2006-6029

SQL injection vulnerability in virLogin.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the UserName field...

CVE-2006-6029

SQL injection vulnerability in virLogin.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the UserName field...

CVE-2006-6029

CVE-2006-6029 is a SQL injection vulnerability in Property Pro 1.0, affecting vir_Login.asp via the UserName field. Remote attackers can potentially execute arbitrary SQL commands due to improper input handling. The vulnerability is documented across multiple sources (NVD, CVE lists) and is disti...

CVE-2006-6029: Undefined Security Weakness

SQL injection vulnerability in virLogin.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the UserName field...

Property Site Manager [login bypass ,multiples injection sql & xss (get)]

vendor site:http://www.mginternet.com/ product:Property Site Manager bug:injection sql ,login bypass , xss risk:medium login bypass : just login with : user: 'or''=' passwd: 'or''=' injection sql : http://site.com/asp/detail.asp?l=&p='sql http://site.com/asp/listings.asp?l='sql...

Microsoft Windows daxctle.ocx and HTML parsing buffer overflows

DirectAnimation.PathControl ActiveX control KeyFrame method heap overflow. Buffer overflow in CSS Floatproperty. May be used for hidden malware installation...

[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...