CVE-2009-0026: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

Built2Go PHP Link Portal 1.95.1 - Arbitrary File Upload

Built2Go PHP Link Portal v1.95.1 RFU ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 22.11.2008 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : dork mu : "PHP Link Portal v1.95.1 © Big...

openSUSE 10 Security Update : wireshark (wireshark-5783)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684 PRP and MATE dissector crash and CVE-2008-46...

CVE-2008-5172: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to a search.jsp, and the 2 msg parameter to b error.jsp and c userAccount.jsp. NOTE: the provenance of this information is unknown; the...

qshop-sqlxss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Q-Shop 3.0 - Cross-Site Scripting SQL Injection

Q-Shop 3.0 - Cross-Site Scripting SQL Injection 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0...

CVE-2008-5067: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

slidepopups-sql.txt

11/07/2008 - You can login as admin with any password, removed /str0ke -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Slide Popups v1.0 Auth Bypass SQL Injection Vulnerabilities...

E-topbiz Domain Shop v2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Domain Shop v2.0 Auth Bypass SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: E-topbiz...

Wireshark Multiple Vulnerabilities (Oct 2008) - Windows

Wireshark is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Wireshark Multiple Vulnerabilities (Oct 2008) - Linux

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2008-4685

Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...

CVE-2008-4685

Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...

CVE-2008-4685

CVE-2008-4685 is a use-after-free vulnerability in the Q.931 dissector (packet-q931.c) of Wireshark, affecting versions 0.10.3 through 1.0.3. The issue occurs in the dissect_q931_cause_ie function and allows a remote attacker to trigger an exception via certain packets, leading to a denial of ser...

CVE-2008-4685

Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...

CVE-2008-4685

Use-after-free vulnerability in the dissectq931causeie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service application crash or abort via certain packets that trigger an exception...

CVE-2008-4438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...