CVE-2002-2334

CVE-2002-2334 affects Joe text editor versions 2.8–2.9.7. Backup files do not have their group and user setuid bits removed, which could allow local users to execute arbitrary setuid/setgid root programs when root edits scripts owned by other users. The NVD CVSS score is 3.6 (LOW) with local atta...

XSS on Obedit v3.03

=============================================== Obedit v3.03 - XSS Vuln. =============================================== Author: Ishkur fuxxx0rz at gmail com Impact: XSS and Cookie Alert Patches: in development ------------------------------------------- Affected Software Description:...

obedit-xss.txt

=============================================== Obedit v3.03 - XSS Vuln. =============================================== Author: Ishkur Impact: XSS and Cookie Alert Patches: in development ------------------------------------------- Affected Software Description:...

CVE-2007-3202

Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...

CVE-2007-3202

The CVE-2007-3202 entry describes a Cross-site scripting (XSS) vulnerability in the Webwiz rich text editor . An attacker can inject arbitrary script/HTML by sending URL-encoded HTML that uses a frameset where a frame’s SRC points to a JavaScript document. This enables remote exploitation per the...

Webwiz vulnerable

Webwiz vulnerable Versiyon: all versions are vulnerable Poc: it's vulnerable because of the rich text editor it accept codes which are dangerous When you hex this code with charcode it accept it and you can deface the topic anywhere using webwiz the code is this frameset cols=100 rows=100 border=...

Cross site scripting

Cross-site scripting XSS vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor...

CVE-2007-2702

CVE-2007-2702 describes a cross-site scripting (XSS) vulnerability in the GroupSpace component of BEA WebLogic Portal 9.2 GA. The root cause is an XSS flaw related to the rich text editor, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The conn...

CVE-2007-2702

Cross-site scripting XSS vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor...

[SECURITY] Fedora Core 6 Update: ed-0.3-0.fc6

Ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. For most purposes, ed has been replaced in normal usage by full-screen editors emacs and vi, for example. Ed was the original UNIX editor, and may be used by some programs. ...

[SECURITY] Fedora Core 5 Update: ed-0.3-0.fc5

Ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. For most purposes, ed has been replaced in normal usage by full-screen editors emacs and vi, for example. Ed was the original UNIX editor, and may be used by some programs. ...

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. The attacker may be able...

Not shelling directly crack Software-bug warning-the black bar safety net

| --- To achieve shell software direct patch, need some skill and luck, although this seems to be very not easy to achieve, in fact, not like everyone thought so difficult, the following listen to me slowly road to. To achieve this with shell patches of the object, of course, you need to make ful...

gedit text editor format string vulnerability

Format string bug in filename...

CVE-2001-1439

Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service "system availability" via text editors such as 1 e, 2 ex, 3 vi, 4 edit, 5 view, and 6 vedit...

HP-UX PHCO_22229 : HPSBUX0102-140 Sec. Vulnerability in Text editors (rev.1)

s700800 11.00 ex1,vi1 cumulative patch : Text editors contain a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22229. The text itself is copyright C Hewlett-Packard Development Company, L....

RHEL 2.1 / 3 : emacs (RHSA-2005:112)

Updated Emacs packages that fix a string format issue are now available. Emacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. If a user connects to a malicious POP server, an...

CVE-2002-2334

Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...

CVE-2001-0289

Joe text editor 2.8 searches the current working directory CWD for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory...