6598 matches found
IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit
Exploit for unknown platform in category web applications ================================================================== IceBB = 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit ================================================================== Author: GiReX 26/07/08 Homepage:...
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB ...
IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking
Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB \ input'author''" Setting author=\ in this query: "SELECT...
OpenSSH X11 < 5.1 Session Hijacking
Binary data 4598.prm...
Oracle BEA Weblogic 10 — Multiple Linked ХSS vulnerabilities
Application: Oracle BEA Weblogic 10 Versions Affected: Oracle BEA Weblogic 10 Vendor URL: Bugs: Multiple XSS Vulnerabilities in samples Exploits: YES Reported: 16.07.2008 Vendor response: 18.07.2008 Last response: 30.10.2008 Description: Review Service sample of WebLogic Server. Date of Public...
CVE-2008-3170
Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking," a related issue to CVE-2004-0746, CVE-2004-0866, and...
CVE-2008-3170
Technical details about CVE-2008-3170 are not publicly available in the provided connected documents; monitor for updates.
siteatschool-uplaod.txt
?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)
Bug 417411 - CVE-2007-5615: jetty CRLF injection - Bug 417391 - CVE-2007-5613: jetty cross site scripting - Bug 417401 - CVE-2007-5614: jetty session hijacking issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Site@School <= 2.4.10 (fckeditor) Session Hijacking / File Upload Exploit
No description provided by source. ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....:...
Site@School 2.4.10 - FCKeditor Session Hijacking Arbitrary File Upload
Site@School 2.4.10 - FCKeditor Session Hijacking Arbitrary File Upload ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit -------------------------------------------------------------------------...
Site@School 2.4.10 - 'FCKeditor' Session Hijacking / Arbitrary File Upload
?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
[email protected] <= 2.4.10 (fckeditor) Session Hijacking / File Upload Exploit
Exploit for unknown platform in category web applications ========================================================================= email protected = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ========================================================================= ?php /...
tomcat handling of cookies
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes "'" as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...
tomcat handling of cookie values
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks...
Pixelpost cross-site scripting vulnerability
Overview Pixelpost, an open source content management system used for photo albums, etc., contains a cross-site scripting vulnerability. Daiki Fukumori of Secure Sky Technology, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the vendors under Information Security Early Warnin...
Drupal cross-site scripting vulnerability
Overview Drupal, an open source content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possible conduct session hijacking. Solution None...
Hatena Toolbar sends URL information unecnrypted
Overview Hatena Toolbar improperly sends URL information to the Hatena server without being encrypted when a user views a web page secured by SSL. Impact When a user of Hatena Toolbar views a SSL secured web page, an attacker could obtain the information contained in the URL such as a session ID...
Dokeos cross-site scripting vulnerability
Overview Dokeos, an open source e-learning content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. In particular, if session information from a cookie is leaked, an attacker could possibly conduct session...
Movable Type vulnerabile to cross-site scripting
Overview Movable Type, a web log system from Six Apart, contains a cross-site scripting vulnerability in its search module. Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, session hijacking could be conducted...