CVE-2006-6154: Undefined Security Weakness

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...

CVE-2006-6156: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auth/message.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF. NOTE: The provenance of this information is unknown; the details are obtained solely from...

HSRS 1.0 (addcode.php) Remote File Include Vulnerability

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php...

HSRS 1.0 - addcode.php Remote File Inclusion

HSRS 1.0 - addcode.php Remote File Inclusion --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script...

HSRS 1.0 - 'addcode.php' Remote File Inclusion

--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php Remote File Include Vulnerability Foun...

HSRS 1.0 (addcode.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================== HSRS 1.0 addcode.php Remote File Include Vulnerability ======================================================== --------------------------------------|| Viva Palestine...

CVE-2006-3061

CVE-2006-3061 describes multiple cross-site scripting (XSS) vulnerabilities in the 5 Star Review application, allowing remote attackers to inject arbitrary web script or HTML via five input points: (1) sort in index2.php, (2) item_id in report.php, (3) search_term in search_reviews.php, (4) profi...

CVE-2006-3061: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the 1 sort parameter in index2.php, 2 itemid parameter in report.php, 3 searchterm parameter aka the "search box" in searchreviews.php, 4 the profile field in...

Five Star Review Script - report.php?item_id Cross-Site Scripting

Five Star Review Script - report.php?itemid Cross-Site Scripting source: https://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

Five Star Review Script - 'report.php?item_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18390/info Five Star Review Script is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to run arbitrary HTML and script code in the browser of a...

CVE-2006-2082: Undefined Security Weakness

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

Breakthrough in the users permissions broken star Lann-bug warning-the black bar safety net

users permissions are really so low? Our school room has restore card, USB are also sealed, and the BIOS has a super-long password, the external network is also nowhere. Installed VB and the star LAN multimedia network classroom. But with my generation is not going to use VB coding to a broken...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

FreeBSD : star (1802)

The following package needs to be updated: star %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScript...

CVE-2005-0984

The CVE-2005-0984 issue affects Star Wars Jedi Knight: Jedi Academy (game) up to version 1.011. The root cause is a buffer overflow in the G_Printf function when processing long messages, enabling remote attackers to execute arbitrary code via commands such as say or tell. The connected documents...

CVE-2005-0984: Undefined Security Weakness

Buffer overflow in the GPrintf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as 1 say and 2 tell...

In-game server buffer-overflow in Jedi Academy 1.011

Luigi Auriemma Application: Star Wars Jedi Knight: Jedi Academy http://www.lucasarts.com/products/jediacademy/ Versions: = 1.011 Platforms: Windows, Linux and Mac Bug: buffer-overflow during the visualization of big messages Exploitation: remote, versus server in-game Date: 02 Apr 2005 Author:...