413 matches found
CVE-2007-4433
Cross-site scripting XSS vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2007-4434
Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2007-4433
Cross-site scripting XSS vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2007-4434
Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...
aspnet-xss.txt
ASP.NET version of Text File Search XSS Vulnerability Software: ASP.NET version of Text File Search download: http://www.aspindir.com/goster/5084 demo: http://aspnet.asp101.com/samples/textfilesearch.aspx Found By: GeFORC3 G3 Example & Exploit : You write xss code in ASP.NET version of Text File...
tfsc-xss.txt
Text File Search Classic ASP Sample Code XSS Vulnerability Software: Text File Search Classic ASP Sample Code download: http://www.aspindir.com/goster/5087 demo: http://www.asp101.com/samples/textfilesearch.asp Found By: GeFORC3 G3 Exploit: This xss works on Text File Search Classic ASP Sample...
GestArt Beta 1 - aide.php?aide Remote File Inclusion
GestArt Beta 1 - aide.php?aide Remote File Inclusion .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : GestArt Download : http://www.phpscripts-fr.net/scripts/scripts.php?cat=Gestion Author : Dj7xpl | [email protected]...
Be careful with your attachment text file spoofing-vulnerability warning-the black bar safety net
If the received mail attachments with a look like this file: QQ靓号放送.txt you think it certainly is a plain text file? I have to tell you, not necessarily it! 它 的 实际 文件 名 可以 是 QQ 靓 号 放送 .txt on. 3050F4D8-98B5-11CF-BB82 - 00AA00BDCE0Bin the registry is the HTML file associated with the mean. But the...
Microsoft Windows对象包装程序对话框欺骗漏洞（MS06-065）
Microsoft Windows是微软发布的非常流行的操作系统。 Windows的对象包装程序（packager.exe）在处理命令行属性时存在输入验证错误，本地攻击者可能利用此漏洞提升自己的权限。 攻击者可以通过在命令行属性中包含“/”斜线字符欺骗包装程序对话框中的文件名和相关文件类型。这允许攻击者诱骗用户打开包含有嵌入Package对象的Rich Tex或Word文档导致在用户系统上执行任意shell命令。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1...
Zeroboard File Upload & extension bypass Vulnerability
Zeroboard File Upload & extension bypass Vulnerability Author : Choi Min-sung mins at wins21.com Product : Zeroboard http://www.nzeo.com Verndor-Patches : Unpatched Impact : remote code execution Summary ======= Basically, the PHP, HTML, and CGI files are prohibited to upload in Zeroboard. But...
CANews Remote Multiple Vulnerability
------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...
Dayfox Blog Insecure Password Storage
------------------------------------------------------------------ - Dayfox Blog Insecure Password Storage - -= http://colander.altervista.org/advisory/DayfoxBlog.txt =- ------------------------------------------------------------------ -= Dayfox Blog =- Omnipresent May 19, 2006 Vunerabilitys:...
Wimpy MP3 Player 5 - Text File Overwrite
source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The following proof of concept URI is available:...
Wimpy MP3 Player 5 - Text File Overwrite
Wimpy MP3 Player 5 - Text File Overwrite source: https://www.securityfocus.com/bid/16696/info Wimpy MP3 is prone to a weakness that permits the overwriting of a text file with arbitrary attacker-supplied data. Successful exploitation of this issue may aid an attacker in further attacks. The...
[Full-disclosure] Wimpy MP3 Player - Text file overwrite vulnerability
======================================================================================= XOR Crew :: Security Advisory 2/10/2006 ======================================================================================= Wimpy MP3 Player - Text file overwrite. lame...
Buffer overflow
The cairo library libcairo, as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service persistent client crash via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the...
CVE-2006-0528
The cairo library libcairo, as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service persistent client crash via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the...
[Full-disclosure] gnome evolution mail client inline text file DoS issue
i admit, i posted this bug just a short while ago, but since its an anoyance more then a vuln.. i dont really care.. be glad i didnt demo it here : for evolution users anyway so the issue is with text based file attachments with the "Content-Disposition" set to "inline".. if this text file contai...
PBLang 4.65 (possibly prior versions) remote code execution
PBLang 4.65 possibly prior versions remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure software: description: PBLang is a powerful flatfile Bulletin Board System. It combines many features of a professional board,...