2271 matches found
Ubuntu Update for php5 vulnerabilities USN-549-1
Ubuntu Update for Linux kernel vulnerabilities USN-549-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5491.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-549-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2008-6269: Improper Authentication
Joovili 3.1.4 allows remote attackers to bypass authentication and gain privileges as other users, including the administrator, by setting the 1 sessionid, sessionloggedin, and sessionusername cookies for user privileges; 2 sessionadminid, sessionadminusername, and sessionadmin cookies for admin...
MailMarshal Spam Quarantine Management (SQM) Multiple Component XSS
The remote host is running MailMarshal SMTP, a mail server for Windows. The Spam Quarantine Management web component included with the version of MailMarshal SMTP installed on the remote host is affected by a persistent cross-site scripting vulnerability in its 'delegated spam management' feature...
MailMarshal < 6.4 Spam Quarantine Management XSS
Binary data 4697.prm...
Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Cross-site scripting in Oracle Enterprise Manager REFRESHCHOICE Parameter August 4, 2008 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10gR1, 10gR2 and 11g 11.1.0.6 Remote exploitable: Ye...
Serene Bach cross-site scripting vulnerability
Overview Serene Bach, a weblog management tool from SerendipityNZ Limited, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Also, session information or credential information kept in a cookie could be leaked. Solution None...
PR08-02: Plone CMS Security Research - the Art of Plowning
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR08-02: Plone CMS Security Research: the Art of Plowning Product description: Plone is a ready-to-run content management system built on the powerful, and free, Zope application server. Plone is easy to set up, extremely flexible, and provides you wi...
ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1)
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2008-03-11-1 ------------------------------------------------------------------------- ASPR 2008-03-11-1: HTML Injection in BEA WebLogic Server Console...
Debian Security Advisory DSA 388-1 (kdebase)
The remote host is missing an update to kdebase announced via advisory DSA 388-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 7.10 : php5 regression (USN-549-2)
USN-549-1 fixed vulnerabilities in PHP. However, some upstream changes were incomplete, which caused crashes in certain situations with Ubuntu 7.10. This update fixes the problem. We apologize for the inconvenience. It was discovered that the wordwrap function did not correctly check lengths...
CVE-2007-3694-bm.txt
Source: http://int21.de/cve/CVE-2007-3694-bm.html Cross site scripting XSS in broadcast machine References http://www.getmiro.com/create/broadcast/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3694 Description Cross site scripting describes attacks that allow to insert malicious html or...
php cross-site cookie insertion
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
php cross-site cookie insertion
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
Apache Tomcat multiple security vulnerabilities
Information leak on session cookies with ' or ". Crossite scripting in Host Manager servlet...
Crack the Session cookie method-vulnerability warning-the black bar safety net
The so-called session cookies, is a platform in you after a successful login, a cookie that indicates you have passed verification, but with the General cookie is different, he will not be there on your hard drive, that is to say: before you leave the browser, it will disappear, which means: the...
tim-xss.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TIM Telecom Italia Mobile is a big italian phone company. The web portal TIM.it is vulnerable to XSS attacks in search function http://www.tim.it/ricerca/d/areaconsumer/ricercasito.do. An attacker can steal cookie session and access with victim...
[Full-disclosure] CVE-2007-3693: Cross site scripting and information disclosure in gobi/helma
http://int21.de/cve/CVE-2007-3693-gobi.txt Cross site scripting and information disclosure in gobi/helma security advisory References: http://gobi.helma.org/ https://vulners.com/cve/CVE-2007-3693 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript...
CVE-2007-1871: Cross site scripting in chcounter 3.1.3
Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ https://vulners.com/cve/CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...
CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3
Cross site scripting in toendaCMS 1.5.3 security advisory References: http://www.toendacms.com/ https://vulners.com/cve/CVE-2007-1872 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...
CVE-2007-1871.txt
Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be use...