Cross site scripting

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

CVE-2008-6732

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

CVE-2008-6732: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."...

iDB 'skin' Parameter Local File Include Vulnerability

iDB Internet Discussion Boards is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. i...

iDB 'skin' Parameter Local File Include Vulnerability

iDB Internet Discussion Boards is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6542

CVE-2008-6542 affects DotNetNuke’s Skin Manager prior to 4.8.2. The vulnerability allows a remote authenticated administrator to trigger server-side execution of application logic by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM/HTML files. The...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6542: Undefined Security Weakness

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

Winamp skin file MAKI script buffer overflow

Added: 03/10/2009 BID: 34009 Background Winamp is a media player for Windows. Problem A buffer overflow in Winamp allows command execution when a user opens a skin file containing a compiled MAKI script with a specially crafted string having an incorrect length field. Resolution Upgrade to Winamp...

CVE-2008-6414

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-6414

CVE-2008-6414 describes a SQL injection in the file detail.php of AJ Auction Pro Platinum Skin 2, exploitable via the item_id parameter. The underlying issue is improper handling of user-supplied input in a query, allowing remote attackers to craft and execute arbitrary SQL commands. The vulnerab...

Winamp skin.xml皮肤文件处理缓冲区溢出漏洞

BUGTRAQ ID: 34009 Winamp是一款流行的媒体播放器，支持多种文件格式。 如果Winamp受骗加载了恶意的皮肤文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意代码。 Nullsoft Winamp 5.541 厂商补丁： Nullsoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.winamp.com/ http://www.sebug.net/exploit/5933/...

CVE-2008-6414: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Winamp 5.541 Skin Buffer Overflow Exploit

!/usr/bin/perl WinAmp = 5.541 Skin Universal Buffer Overflow Exploit Discovered and Exploited by SkD [email protected] ----------------------------------------------------- WinAmp = http://www.winamp.com Who doesn't use WinAmp? This was an 0day for sometime but with the release of the new versio...

CVE-2009-0261

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value...

PHP Photo Album 0.8b - 'preview' Local File Inclusion

START 0x01 Informations: Script : Php Photo Album 0.8 BETA Download : http://sourceforge.net/project/downloading.php?groupid=151573&usemirror=kent&filename=PHPPA.9BETA.zip&37834145 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes :...