4591 matches found
CVE-2006-2509
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2509
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2510
CVE-2006-2510 is an XSS vulnerability in the URL submission form of YourFreeWorld.com Short Url & Url Tracker Script. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified URL submission form. The connected documents do not provide explicit product version, e...
CVE-2006-2509
The CVE-2006-2509 entry concerns YourFreeWorld.com Short Url & Url Tracker Script. The vulnerable component is login.php, where the id parameter allows SQL injection, enabling remote attackers to execute arbitrary SQL commands. The available references describe the issue as a SQL injection affect...
CVE-2006-2510
Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...
Yourfreeworld.com Short Url & Url Tracker Script
This is the second script I've tested from these people. It will be assumed for right now that all of their scripts contain full path disclosure errors as well as XSS'ing Yourfreeworld.com Short Url & Url Tracker Script Homepage: http://www.yourfreeworld.com/script/shorturl.asp Short Url Service...
Design/Logic Flaw
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...
Cross site scripting
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
CVE-2006-1673 affects Dark_Wizard vBug Tracker, specifically the vbugs.php component in version 3.5.1 and earlier. The vulnerability arises from lack of proper input handling in the sortorder parameter, enabling a remote attacker to inject arbitrary web script or HTML (XSS). Exploitation details,...
vBulletin 3.5.x vBug Tracker XSS vuln.
vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...
Mantis Bug Tracker 0.x1.0 - manage_user_page.php?sort Cross-Site Scripting
Mantis Bug Tracker 0.x1.0 - manageuserpage.php?sort Cross-Site Scripting source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure ...
Mantis Bug Tracker 0.x/1.0 - 'manage_user_page.php?sort' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
