DirectAdmin <= v1.30.2 XSS vuln.

DirectAdmin = v1.30.2 XSS vuln. Vuln. discovered by : r0t Date: 10 September 2007 vendor:http://www.directadmin.com/ orginal advisory: http://pridels-team.blogspot.com/2007/09/directadmin-v1302-xss-vuln.html affected versions:v1.30.2 and previous DirectAdmin contains a flaw that allows a remote...

eXV2.de Browser Cookie is not properly sanitised

Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...

OpenWebMail Multiple XSS vuln.

OpenWebMail Multiple XSS vuln. Vuln. discovered by : r0t Date: 2 August 2007 vendor:openwebmail.org orginal advisory: http://pridels-team.blogspot.com/2007/08/openwebmail-multiple-xss-vuln.html affected versions:2.52 20060831 and previous OpenWebMail contains multiple flaws that allows a remote...

FreeBSD : joomla -- multiple vulnerabilities (4872d9a7-4128-11dc-bdb0-0016179b2dd5)

A Secunia Advisory reports : joomla can be exploited to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks. Certain unspecified input passed in comsearch, comcontent and modlogin is not properly sanitised before being returned to a user. This can be...

DTSA-42-1 ipsec-tools - missing input sanitising

Bulletin has no description...

rwAuction Pro XSS vuln.

rwAuction Pro XSS vuln. Vuln. discovered by : r0t Date: 27 June 2007 vendor:http://www.rainworx.com/ orginal advisory: http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html affected versions:rwAuction Pro v5.0 other versions also can be affected. rwAuction Pro contains a flaw that...

access2asp XSS vuln.

access2asp XSS vuln. Vuln. discovered by : r0t Date: 22 June 2007 vendor:http://www.access2asp.com/ orginal advisory: http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html affected versions: access2asp v4.5 and prior access2asp contains a flaw that allows a remote Cross-Site Scripting...

Interact multiple XSS vuln.

Interact multiple XSS vuln. Vuln. discovered by : r0t Date: 21 June 2007 vendor:www.interactole.org orginal advisory: http://pridels-team.blogspot.com/2007/06/interact-multiple-xss-vuln.html affected versions: tested on "Interact 2.4 beta 1" other versions also can be affected. Interact contains ...

Parodia XSS vuln

Vuln. discovered by : r0t Date: 18 May 2007 vendor:http://parodia.net/ affected versions: v6.4 and prior Parodia contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "strJobIDs" parameter in "candlogin.asp" isn't properly sanitised before being returned to the use...

PHPChain vuln.

PHPChain vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://www.globalmegacorp.org/PHPChain/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2007/05/phpchain-vuln.html PHPChain contains a flaw that allows a remote Cross-Site Scripting attacks.Input...

[MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue

MajorSecurity Advisory 44MailBee WebMail Pro - Cross Site Scripting Issue Details ======= Product: MailBee WebMail Pro 3.4 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.afterlogic.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Davi...

[SA23643] FirePass Cross-Site Scripting Vulnerabilities

TITLE: FirePass Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA23643 VERIFY ADVISORY: http://secunia.com/advisories/23643/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote OPERATING SYSTEM: FirePass 6.x http://secunia.com/product/13146/ FirePass 5.x...

wp205-xss.txt

Vulnerability Title: WordPress Persistent XSS Author: David Kierznowski Homepage: http://michaeldaw.org Software Vendor: WordPress Persistent XSS Versions affected: Confirmed in v2.0.5 latest WordPress is a popular open source blogging software. A persistent XSS vulnerability has been found in...

[MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues

MajorSecurity Advisory 35Travelsized CMS - Multiple Cross Site Scripting Issues Details ======= Product: Travelsized CMS Affected Version: = 0.4.1 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://leinir.dk/travelsized/ Vendor-Status: informed Advisory-Status: published Credits...

MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues

MajorSecurity Advisory 31Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues Details ======= Product: xenis.creator CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.xenis.cc Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...

[MajorSecurity Advisory #29]foresite CMS - Cross Site Scripting Issue

MajorSecurity Advisory 29foresite CMS - Cross Site Scripting Issue Details ======= Product: ForeSite CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.foresite.ch Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

Debian DSA-1031-1 : cacti - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146...

Debian DSA-1029-1 : libphp-adodb - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas Sandblad discovered that improper user input sanitisation results in a potenti...

Debian DSA-1030-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in moodle, a course management system for online learning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas...

[SA22211] WWWthreads "Cat" Cross-Site Scripting Vulnerabilities

TITLE: WWWthreads "Cat" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA22211 VERIFY ADVISORY: http://secunia.com/advisories/22211/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WWWthreads http://secunia.com/product/9471/ DESCRIPTION: Root3rH3ll has...