CVE-2008-4152

CVE-2008-4152 is a cross-site scripting issue in Drupal’s Talk module (5.x before 5.x-1.3 and 6.x before 6.x-1.5). It enables remote authenticated users to inject arbitrary web script/HTML via a node title. Affected versions are prior to the specified fixes; remediation is to upgrade to 5.x-1.3 a...

CVE-2008-4153

The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information...

CVE-2008-4153: Undefined Security Weakness

The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information...

CVE-2008-4152: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title...

SA-2008-049 - Talk - Multiple vulnerabilities

The Talk module for Drupal 5.x and 6.x creates a "Talk" tab for nodes in which the comments belonging to the node are displayed. Two vulnerabilities and weaknesses were discovered in the contributed Talk module. Cross site scripting The node title is treated as if it was safe text, and is not...

Google Talk http和mailto远程代码注入漏洞

BUGTRAQ ID: 29946 Google Talk是一款流行的即时通讯软件，允许直接与其他的计算机用户进行语音对话。 GTalk没有正确地验证用户在聊天对话窗口中所提交的http和mailto，如果可信任的联系人在对话窗口中提交了特制的URL或mailto地址的话，就会导致在对方的机器上注入并执行HTML代码，或执行跨站脚本攻击。 Google Talk 1.0.0.105 Google ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.google.com http://"h1Lostmon/h1...

Joomla Component Nice Talk <= 0.9.3 (tagid) SQL Injection Vulnerability

No description provided by source. Title : Joomla Component Nice Talk = 0.9.3 tagid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.azrul.com $$ : ?? Dork : inurl:index.php?option=comnicetalk DorkEx :...

joomlanicetalk-sql.txt

Title : Joomla Component Nice Talk = 0.9.3 tagid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.azrul.com $$ : ?? Dork : inurl:index.php?option=comnicetalk DorkEx : http://www.google.com.tr/search?q=inurl:index.php%3Foption%3Dcomnicetalk&hl=tr&start=0&sa=N...

Sql injection

SQL injection vulnerability in index.php in the Nice Talk component comnicetalk 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter...

CVE-2007-4503

SQL injection vulnerability in index.php in the Nice Talk component comnicetalk 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter...

CVE-2007-4503

SQL injection vulnerability in index.php in the Nice Talk component comnicetalk 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter...

CVE-2007-4503

CVE-2007-4503 describes an SQL injection in the Joomla! Nice Talk component (com_nicetalk) version 0.9.3 and earlier. The vulnerability exists in index.php where the tagid parameter can be exploited by a remote attacker to execute arbitrary SQL commands. The NVD entry lists a HIGH base score (7.5...

Joomla! Component Nice Talk 0.9.3 - tagid SQL Injection

Joomla! Component Nice Talk 0.9.3 - tagid SQL Injection Title : Joomla Component Nice Talk = 0.9.3 tagid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.azrul.com $$ : ?? Dork : inurl:index.php?option=comnicetalk DorkEx :...

Joomla! Component Nice Talk 0.9.3 - 'tagid' SQL Injection

Title : Joomla Component Nice Talk = 0.9.3 tagid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.azrul.com $$ : ?? Dork : inurl:index.php?option=comnicetalk DorkEx : http://www.google.com.tr/search?q=inurl:index.php%3Foption%3Dcomnicetalk&hl=tr&start=0&sa=N...

Joomla Component Nice Talk <= 0.9.3 (tagid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla Component Nice Talk = 0.9.3 tagid SQL Injection Vulnerability ======================================================================= Title : Joomla Component...

CVE-2007-4503: Undefined Security Weakness

SQL injection vulnerability in index.php in the Nice Talk component comnicetalk 0.9.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the tagid parameter...

Google Talk DXImage传送HTML注入漏洞

Google Talk是一款流行的即时聊天程序。 Google Talk不正确处理用户提交的输入，远程攻击者可以利用漏洞进行HTML注入攻击，可能获得敏感信息。 攻击者可以追加脚本代码到文件扩展名后，当Google Talk解析时可导致恶意脚本代码在用户端执行，可泄露敏感信息。 Google Talk 1.0 .104 目前没有解决方案提供： http://www.google.com/talk/...

Google Talk Password Recovery-vulnerability warning-the black bar safety net

Information source: evil octal information security team www.eviloctal.com） Google Talk Password Recovery is a utility for finding and decrypting Google Talk passwords that are stored on your computer with a click of a button! This password decoder works when "Remember Password" checkbox is ticke...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...

CVE-2006-1810

CVE-2006-1810 involves multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA . The affected component is the user profile handling, with attacker-controlled inputs in fields such as ICQ, AIM, MSN, Google Talk, Website Name, Website Address, Email Address, Location, Signature, a...