[SECURITY] Fedora 7 Update: Django-0.96.1-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 8 Update: Django-0.96.1-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Rapid Classified - AgencyCatResult.asp SQL Injection

Rapid Classified - AgencyCatResult.asp SQL Injection source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

Rapid Classified - 'AgencyCatResult.asp' SQL Injection

source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

URL spoof in address bar

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

CVE-2007-3553

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

CVE-2007-3553: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting source: https://www.securityfocus.com/bid/24697/info Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can...

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/24697/info Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject HTML and script code into the browser ...

CVE-2006-6930

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6930

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6929

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

CVE-2006-6930

Rapid Classified 3.1 is affected by an SQL injection in viewad.asp via the id parameter, enabling remote execution of arbitrary SQL commands. Root cause: improper handling of the id input in viewad.asp. Affected component: Rapid Classified 3.1 (viewad.asp). Impact: arbitrary SQL execution with pa...

CVE-2006-6929

Rapid Classified 3.1 is affected by CVE-2006-6929 due to multiple cross-site scripting (XSS) vulnerabilities. The issue enables injection of arbitrary web script/HTML via parameters across several scripts: id in reply.asp and view_print.asp, SH1 in search.asp, name in reply.asp, and dosearch in a...

CVE-2006-6929: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

PT-2007-1210 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "viewad.asp" file. Recommendations: For Rapid Classified version 3.1, consider...

PT-2007-1209 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters in different scripts,...

CVE-2006-6930: Undefined Security Weakness

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

rapidclassified31.txt

vendor site: http://www.4u2ges.com/ product : Rapid Classified v3.1 bug: multiple xss get & injection sql risk : medium injection sql : /viewad.asp?id='sql xss : /reply.asp?id=xss /viewprint.asp?id=xss /search.asp?categoryName=1&SH1=xss /reply.asp?id=50120815480100001&name=xss...

Rapid Classified 3.1 - advsearch.asp Cross-Site Scripting

Rapid Classified 3.1 - advsearch.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly saniti...