10765 matches found
Wowd Search Client XSS
Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Advisore:http://lostmon.blogspot.com/2009/10/ wowd-search-client-multiple-variable.html Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time search engine for discovering what's popular on the web right...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the lastmessage parameter to 1 add.php, 2 toBePublished.php, 3 index.php, and 4 admin.php; the PATHINFO to the default URI to 5 category.php, 6 department.php, 7...
CVE-2009-3789
Multiple cross-site scripting XSS vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the lastmessage parameter to 1 add.php, 2 toBePublished.php, 3 index.php, and 4 admin.php; the PATHINFO to the default URI to 5 category.php, 6 department.php, 7...
Format string
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a download URI. NOTE: som...
CVE-2009-3617
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a download URI. NOTE: som...
CVE-2009-3617
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a download URI. NOTE: som...
IBM Installation Manager iim URI Handling Code Execution
Added: 10/16/2009 CVE: CVE-2009-3518 BID: 36549 OSVDB: 58420 Background IBM Installation Manager IIM is a software tool that helps to install, update, modify, and uninstall packages. Problem When IIM is installed it registers the application IBMIM.exe as the iim:// scheme handler, so when an iim:...
IBM Installation Manager iim URI Handling Code Execution
Added: 10/16/2009 CVE: CVE-2009-3518 BID: 36549 OSVDB: 58420 Background IBM Installation Manager IIM is a software tool that helps to install, update, modify, and uninstall packages. Problem When IIM is installed it registers the application IBMIM.exe as the iim:// scheme handler, so when an iim:...
IBM Installation Manager iim URI Handling Code Execution
Added: 10/16/2009 CVE: CVE-2009-3518 BID: 36549 OSVDB: 58420 Background IBM Installation Manager IIM is a software tool that helps to install, update, modify, and uninstall packages. Problem When IIM is installed it registers the application IBMIM.exe as the iim:// scheme handler, so when an iim:...
IBM Installation Manager iim URI Handling Code Execution
Added: 10/16/2009 CVE: CVE-2009-3518 BID: 36549 OSVDB: 58420 Background IBM Installation Manager IIM is a software tool that helps to install, update, modify, and uninstall packages. Problem When IIM is installed it registers the application IBMIM.exe as the iim:// scheme handler, so when an iim:...
IBM Rational RequisitePro 7.10 / ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: http://www.example.com/ReqWebHelp/advanced/workingSet.jsp?operation=add/--/scriptscriptalert289325/script&workingSet=...
IBM Installation Manager URI Handling Argument Injection Vulnerability - Windows
IBM Installation Manager is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Installation Manager URI Handling Argument Injection Vulnerability (Windows)
This host has IBM Installation Manager installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: gbibminstallmanagerarginjvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM Installation Manager URI Handling Argument Injection Vulnerability Windows Authors: Antu...
httpdx 1.4.5 - dot Character Remote File Disclosure
httpdx 1.4.5 - dot Character Remote File Disclosure source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the...
httpdx 1.4.5 - dot Character Remote File Disclosure
source: https://www.securityfocus.com/bid/44141/info The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server...
IBM Lotus Expeditor cai URI Handler Command Execution (CVE-2008-1965)
IBM Lotus Expeditor is a software framework for the development, integration and deployment of client applications. The framework include components that run on desktop computers, handheld devices, and management servers. There exist a buffer overflow vulnerability in IBM Lotus Symphony and Lotus...
Apache apr-util IPv6 URI Parsing (CVE-2004-0786)
Apache HTTP server version 2 introduced the Apache Portable Runtime APR, which provides a middle layer between platform independent Apache code and the native operating system API. One of the functions provided by the APR utilities component is the parsing of URI strings. Having this functionalit...
Microsoft showHelp (MS04-023; CVE-2003-1041)
An HTML Help URI provides a link to a compiled help file .chm. When a user references this link, Windows will access the resource. To launch the Help URI with the local HTML Help Windows application, the method showHelp can be used. There is a vulnerability in the way Microsoft's HTML help system...
Joomla! Component CB Resume Builder - group_id SQL Injection
Joomla! Component CB Resume Builder - groupid SQL Injection source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it...
