Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

XOOPS 'text' and 'message' Parameter Cross-Site Scripting Vulnerabilities

XOOPS is prone to cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescripti...

IBM Lotus Notes LZH Attachment Viewer Stack Buffer Overflow (CVE-2011-1213)

A code execution vulnerability has been reported in IBM Lotus Notes. The vulnerability is due to an error while parsing the headers of LZH files. A remote attacker may exploit this vulnerability by enticing a target user to open an email containing a specially crafted LZH file. Successful...

Wireshark LWRES Dissector getaddrsbyname Buffer Overflow (CVE-2010-0304)

A buffer overflow vulnerability has been reported in Wireshark. The vulnerability is due to insufficient boundary checking in the getaddrsbyname method. A remote attacker may exploit this vulnerability by sending an overly long string parameter to this method. Successful exploitation would allow...

Apple Safari WebKit SVG Memory Corruption (CVE-2011-0222)

A memory corruption vulnerability has been reported in Apple Safari. The vulnerability is due to an error caused while handling Scalable Vector Graphics SVG objects. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation m...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow (CVE-2007-5603)

An arbitrary code execution vulnerability has been reported in SonicWall SSL-VPN NetExtender. The vulnerability is due to insufficient length validation by an ActiveX control. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected service. Successfu...

McAfee Visual Trace ActiveX Control Buffer Overflow (CVE-2006-6707)

A code execution vulnerability has been reported in McAfee Visual Trace. The vulnerability is due to a boundary error in the NeoTraceExplorer.NeoTraceLoader ActiveX control. A remote attacker may exploit this vulnerability by passing an overly long string as argument to the "TraceTarget" method...

Microsoft Windows Messenger Service Buffer Overrun Code Execution (CVE-2003-0717)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper validation of message length. A remote attacker may exploit this vulnerability by sending an overly long message to the target service. Successful exploitation may allow the attacker...

RealNetworks RealPlayer QCP Parsing Buffer Overflow (CVE-2011-2950)

A code execution vulnerability has been reported in RealNetworks RealPlayer. The vulnerability is due to insufficient bounds checking while parsing .qcp files. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted .qcp file with an affected version of...

Oracle Java RMI Services Default Configuration Remote Code Execution

A remote code execution vulnerability has been reported in Oracle Java RMI services.The vulnerability is due to insufficient validation of URLs when loading a remote Java object. A remote attacker may exploit this vulnerability by sending a malicious RMI request to the target server. Successful...

Apple Safari WebKit SVG Markers Use-After-Free Memory Corruption (CVE-2011-1453)

A use-after-free vulnerability has been reported in Apple Safari. The vulnerability is due to an error while handling Scalable Vector Graphics SVG objects. A remote attacker may trigger this vulnerability by enticing a target user to open a specially crafted SVG document, possibly embedded in a...

Adobe Photoshop CS5 GIF File Heap Corruption (CVE-2011-2131)

A remote code execution vulnerability has been reported in Adobe Photoshop CS5. The vulnerability is due to insufficient boundary checking while handling crafted GIF files. A remote attacker may trigger this vulnerability by enticing an unsuspecting user to open a malicious GIF file. Successful...

Juniper Networks IVE ActiveX Control Buffer Overflow (CVE-2006-2086)

A buffer overflow vulnerability has been reported in Juniper Networks IVE. The vulnerability is due to a boundary error within an ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted web-page. Successful exploitation would allo...

Sybase Open Server Null Byte Stack Memory Corruption

A remote code execution vulnerability has been reported in Sybase Open Server. The vulnerability is due to an error in the processing of malformed login packets by the server. A remote attacker may exploit this vulnerability by sending a specially crafted packet to an affected Sybase server...

Progea Movicon Negative Content-Length Buffer Overflow (CVE-2011-3491)

A remote code execution vulnerability has been reported in Progea Movicon. The vulnerability is due to a sanitization error while parsing the Content-Length header in an HTTP request. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to an affected serve...

Green Dam URL Length Buffer Overflow

A remote code execution vulnerability has been reported in Green Dam. The vulnerability is due to a boundary check error while filtering specially crafted URLs. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious link. Successful exploitation woul...

Tom Sawyer ActiveX Control Memory Corruption (CVE-2011-2217)

A code execution vulnerability has been reported in Tom Sawyer. The vulnerability is due to an error while instantiating the ActiveX control in a browser. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation of this...

EMC AutoStart Login Request Stack Buffer Overflow (CVE-2011-2735)

A remote code execution vulnerability has been reported in EMC AutoStart. The vulnerability is due to improper boundary checking in EMC AutoStart's Agent Service. A remote attacker may exploit this vulnerability by sending a malicious Login request to an affected service. Successful exploitation...

MODx < 2.0.3-pl modahsh Parameter XSS

The version of MODx hosted on the remote web server fails to sanitize the 'modahsh' parameter of the 'manager/index.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML an...

Microsoft Forefront UAG Poisoned Cup of Code Execution (MS11-079; CVE-2011-1969)

The vulnerability is due to a vulnerable Java applet that is installed on a browser by the Forefront Unified Access Gateway UAG server. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page using a Java-enabled Web-browser. Successful exploitation...