Microsoft Agent crafted URL vulnerability

Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...

Microsoft Agent crafted URL vulnerability

Added: 09/11/2007 CVE: CVE-2007-3040 BID: 25566 OSVDB: 36934 Background Microsoft Agent is a component of the Windows operating system designed to make using a computer easier through enriched user interaction. Problem A vulnerability in Microsoft Agent allows command execution when a user loads ...

Unfixed XSS vulnerability at www.kcclassifieds.com

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting www.kcclassifieds.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at salsavictoria.bc.ca

Security researcher Narcoticxs, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting salsavictoria.bc.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is...

CVE-2007-4329

CVE-2007-4329 concerns Web News 1.1, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by passing a URL in the config[root_ordner] parameter to one of three scripts: index.php, news.php, or feed.php. The source of the flaw is a lack of proper...

Unfixed XSS vulnerability at www.imagine.info

Security researcher Uber0n, has submitted on 07/11/2007 a cross-site-scripting XSS vulnerability affecting www.imagine.info, which at the time of submission ranked 9525459 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/11/2007. It is...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and 1 whstart.js...

CVE-2007-1280

Cross-site scripting XSS vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and 1 whstart.js...

PT-2007-2697 · Adobe · Robohelp +1

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions X5, 6 Adobe RoboHelp Server version 6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path. This can be demonstrated using...

Unfixed XSS vulnerability at www.momento.com.au

Security researcher By Encore, has submitted on 05/04/2007 a cross-site-scripting XSS vulnerability affecting www.momento.com.au, which at the time of submission ranked 618841 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/04/2007. It is...

CVE-2007-2262

Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to execute arbitrary PHP code via a URL in the 1 relPath and 2 folder parameters. NOTE: this product was originally reported as "File117"...

Remote file inclusion

PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot osp 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter...

CVE-2007-1844

Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 button/settingssql.php, 2 settingssql.php, and 3 sources/misc/newday.php...

CVE-2007-1695

PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...

Unfixed XSS vulnerability at wir-helfen-cana.de

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting wir-helfen-cana.de, which at the time of submission ranked 4028671 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at images.newspad.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting images.newspad.com, which at the time of submission ranked 284170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is...

Unfixed XSS vulnerability at www.esextante.com.br

Security researcher SCRiPToRiuM, has submitted on 21/02/2007 a cross-site-scripting XSS vulnerability affecting www.esextante.com.br, which at the time of submission ranked 689560 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/02/2007. It i...

CVE-2007-0189

PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. NOTE: CVE disputes this issue, since GeoBB 1.0 sets $action to a whitelisted value...

CVE-2006-6137

Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the 1 exec parameter to index.php or 2 print parameter to print.php, which is also accessible via the print command to index.php...

CVE-2006-5543

PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database PGOSD, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...