[Full-Disclosure] Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue

-- Corsaire Security Advisory -- Title: BEA WebLogic example InteractiveQuery.jsp XSS issue Date: 04.07.03 Application: BEA WebLogic 8.1 and prior Environment: Various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030704-008 -- Scope -- The aim of this...

[SECURITY] [DSA-388-1] New kdebase packages fix multiple vulnerabilites in KDM

-------------------------------------------------------------------------- Debian Security Advisory DSA 388-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 19th, 2003 http://www.debian.org/security/faq -...

[KDE SECURITY ADVISORY] KDM vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: KDM vulnerabilities Original Release Date: 2003-09-16 URL: http://www.kde.org/info/security/advisory-20030916-1.txt 0. References http://cert.uni-stuttgart.de/archive/suse/security/2002/12/ msg00101.html...

Slash-based bulletin boards contain a "quick login" feature that may disclose username and password

Overview Slash-based bulletin boards contain a vulnerability that may cause users to disclose their username and password to third-party sites. Description As described in the Slashcode FAQ, "Slash is a database-driven news and message board, using Perl, Apache and MySQL." Slash allows web site...

CSS in ikonboard 3.0.1,3.0.2,3.0.3

author: Maxspeed vendor statues: they have been informed Vulnerable versions: ikonboard 3.0.1 ikonboard 3.0.2 ikonboard 3.0.3the version they use on their site Severity: Malicious users can steal session cookies, allowing administrative access to the admin panel Problem: Ok the problem is in the...

CVE-2001-0857

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter...

CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]

Advisory Title: CSS vulnerabilities in YaBB and UBB allow account hijack Multiple Vendor Release Date: 08/01/2002 Application: YaBB and UBB Platform: Any system supporting PERL. Build - YaBB : 1 Gold - Service Pack 1 - older versions were effected in the same way. UBB : Ultimate Bulletin BoardTM...

Слабое шифрование в PHP-Nuke (weak encryption)

Вместо исопльзование сеансовых cookie, cookie содержат пароль администратора в base64...

Вставка скриптов в URL в Horde IMP (crossite scripting)

Вставив скрипт в URL можно получить доступ к сеансовым cookie...

ASPR #2000-07-22-1: Remote Retrieval Of IIS Session Cookies From Web Browsers

=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-07-22-1-PUB ------------------------------------------------------------------------- Remote Retrieval Of IIS Session Cookies From Web Browsers...

msie.5.0.cookies.txt

Date: Wed, 24 Mar 1999 01:16:36 -0400 From: Claudio Valderrama C. To: [email protected] Subject: MSIE 5 Hello. I hope this will avoid headaches to system administrators: - MSIE 5, when installed, changes silently the setting for the cookies to "Accept always" no matter how did you...