CVE-2009-2156

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

Micro's Articles system v1. 5 1 vulnerability-vulnerability warning-the black bar safety net

This system previously it was analysed today see with the updated version so download the back to see The previous vulnerability is up, but new holes came a is upload vulnerability A is background injection The first says that transfer in /manage/video/upfilesoft. asp does not contain the...

Dokuwiki 2009-02-14 Local File Inclusion Vulnerability

No description provided by source. Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload config fil...

Dokuwiki 2009-02-14 - TemporaryRemote File Inclusion

Dokuwiki 2009-02-14 - TemporaryRemote File Inclusion Dokuwiki 2009-02-14 Remote/Temporary File Inclusion exploit tested and working I was reading: http://www.milw0rm.com/exploits/8781 by girex quote It's not a RFI couse use of fileexists function. /quote How wrong brother! trick 1 ftp:// wrapper...

Design/Logic Flaw

Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated...

Design/Logic Flaw

Mozilla Firefox executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as...

Design/Logic Flaw

Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a w...

CVE-2009-1598

Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrate...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

[Backports-security-announce] Security Update for mediawiki

Gerfried Fuchs uploaded new packages for mediawiki which fixed the following security problems: CVE-2008-5249, Debian BTS 508868 Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Gentoo Security Advisory GLSA 200902-05 (ktorrent)

The remote host is missing updates announced in advisory GLSA 200902-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200902-05 (ktorrent)

The remote host is missing updates announced in advisory GLSA 200902-05. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200902-05 : KTorrent: Multiple vulnerabilitites

The remote host is affected by the vulnerability described in GLSA-200902-05 KTorrent: Multiple vulnerabilitites The web interface plugin does not restrict access to the torrent upload functionality CVE-2008-5905 and does not sanitize request parameters properly CVE-2008-5906 . Impact : A remote...

KTorrent: Multiple vulnerabilitites

Background KTorrent is a BitTorrent program for KDE. Description The web interface plugin does not restrict access to the torrent upload functionality CVE-2008-5905 and does not sanitize request parameters properly CVE-2008-5906 . Impact A remote attacker could send specially crafted parameters t...

Unrestricted file upload

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

Memberkit 1.0 - Arbitrary File Upload

Memberkit 1.0 - Arbitrary File Upload ================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08...

phpAdBoard (php uploads) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpAdBoard php uploads Arbitrary File Upload Vulnerability ============================================================...

FreeBSD : mediawiki -- multiple vulnerabilities (61b07d71-ce0e-11dd-a721-0030843d3802)

The MediaWiki development team reports : Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Certain unspecified input related to uploads ...

CVE-2008-5250

Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...

DEBIAN-CVE-2008-5250

Cross-site scripting XSS vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, when Internet Explorer is used and uploads are enabled, or an SVG scripting browser is used and SVG uploads are enabled, allows remote authenticated users to inject arbitrary web...