4535 matches found
CVE-2006-1584
The CVE-2006-1584 entry concerns Warcraft III Replay Parser for PHP 1.8c, where an unspecified vulnerability in index.php could allow remote injection of arbitrary web script/HTML via a page parameter. Post-disclosure analysis in the sources notes that the page parameter may not be used by this p...
CVE-2006-1583
CVE-2006-1583 describes a cross-site scripting (XSS) vulnerability in the PHP-based Warcraft III Replay Parser (version 1.8c) affecting index.php. The vulnerability is triggered via the page parameter, allowing remote attackers to inject arbitrary script/HTML. Post-disclosure analysis indicates t...
CVE-2006-1583
Cross-site scripting XSS vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" migh...
CVE-2006-1584
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" paramet...
Warcraft III Replay Parser Script Remote Command Exucetion Vulnerability And Cross-Site Scripting Attacking
Website : http://toya.net.pl/julas/w3g/ Version : 1.8c Description : Warcraft III Replay Parser for PHP? What is that? Maybe you know or maybe not that Warcraft III replay files .w3g have much information inside. Almost everything can be pulled out of them: players accounts, races, colours, heroe...
warcraftIII-18c.txt
Website : http://toya.net.pl/julas/w3g/ Version : 1.8c Description : Warcraft III Replay Parser for PHP? What is that? Maybe you know or maybe not that Warcraft III replay files .w3g have much information inside. Almost everything can be pulled out of them: players accounts, races, colours, heroe...
Code injection
A "programming error" in fastipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and...
CVE-2006-0905
A "programming error" in fastipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and...
CVE-2006-0905
The CVE-2006-0905 entry concerns a programming error in fast_ipsec on FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2–3 that fails to properly update the Security Association sequence number. This flaw lets remote attackers bypass sequence-number checks, enabling interception of IPSec packets...
CVE-2006-0905
A "programming error" in fastipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and...
FreeBSD IPSec replay attack
fastipsec implementation doesn't increment packet sequence number, allowing replay attack for captured packet...
FreeBSD Security Advisory FreeBSD-SA-06:11.ipsec
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sysnetipsec Announced: 2006-03-22 Credits: Pawel...
ipsec -- reply attack vulnerability
Problem Description IPsec provides an anti-replay service which when enabled prevents an attacker from successfully executing a replay attack. This is done through the verification of sequence numbers. A programming error in the fastipsec4 implementation results in the sequence number associated...
FreeBSD-SA-06:11.ipsec
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:11.ipsec Security Advisory The FreeBSD Project Topic: IPsec replay attack vulnerability Category: core Module: sysnetipsec Announced: 2006-03-22 Credits: Pawel...
Cross site request forgery (csrf)
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...
Sony Instant Video Everywhere replay attacl cryptography problem
Password is encrypted without using challenge. It makes it possible to replay authentication again...
CVE-2005-2403
The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username...
CVE-2005-2185
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks...
CVE-2005-2185
CVE-2005-2185 affects eRoom: cookies without expiration enable remote attackers to capture cookies and perform replay attacks. CVSS metrics from NVD show an external network attack with low complexity, no authentication, and partial impact on confidentiality, integrity, and availability (base sco...