1492 matches found
Discuz plug-in the virtual stock market of blind Injection Vul exploit-vulnerability warning-the black bar safety net
Vulnerability discovery from a station of the penetration, due to its discuz version 7. 0, so I can only put the eye is focused on the installation of third-party plug-ins. After a simple test, it is found that the virtual stock market of the presence of injection vulnerabilities:...
ChartDirector 5.0.1 (cacheId) Arbitrary File Disclosure Vulnerability
Exploit for unknown platform in category web applications ===================================================================== ChartDirector 5.0.1 cacheId Arbitrary File Disclosure Vulnerability =====================================================================...
ChartDirector 5.0.1 - cacheId Arbitrary File Disclosure
ChartDirector 5.0.1 - cacheId Arbitrary File Disclosure ==================================================== Advisory No.: ISNSC-0910 ============= ChartDirector Critical File Access Information ====== Author: DokFLeed Program Affected: http://www.chartdir.com for .NET Version: 5.0.1 Severity:...
Spam Kingpin Ralsky Pleads Guilty to Stock Fraud
From IDG News Service Stephen Lawson Alan Ralsky, a spam kingpin who was convicted of felony bank fraud in 1995, could face more than seven years in prison after pleading guilty in a stock fraud case involving spam messages that pumped up Chinese “penny” stocks. Ralsky and four other individuals...
Cross site scripting
Cross-site scripting XSS vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4710
The CVE-2008-4710 entry describes a Cross-site Scripting (XSS) flaw in the Stock 6.x Drupal module (Stock quotes page), affected on versions before 6.x-1.0. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Root cause is an XSS vulnerability in the...
CVE-2008-4710
Cross-site scripting XSS vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4710: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SA-2008-055 - Stock - Cross site scripting
The stock module provides the ability to query price quotes and trading volumes from various stock markets. An oversight in the menu permissions code allows any user to change the text of the heading at the top of the stock quotes page. As this text is not escaped, it is safe only for an...
Mozilla Firefox 1.5 (Linux) - location.QueryInterface() Code Execution (Metasploit)
Mozilla Firefox 1.5 Linux - location.QueryInterface Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license a...
Stock portfolio sent via clear text in Datek Streamer® application
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 S4R - A Managed Services Company Security - Systems - Storage - Solutions http://www.s4r.com [email protected] Title: Stock portfolio sent via clear text in Datek Streamer® application Date: November 9, 2001 1. Description Although the user's primary Datek...
