CVE-2005-0040

Multiple cross-site scripting XSS vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 register a new user page, 2 User-Agent, or 3 Username, which is not properly quoted before sending to the error log...

CVE-2005-0040

DotNetNuke (DNN) before 3.0.12 is affected by multiple XSS vulnerabilities (CVE-2005-0040) that allow remote attackers to inject script via (1) the register-a-new-user page, (2) the User-Agent header, and (3) the Username field, due to improper quoting before logging. Affected versions are

CVE-2003-1165

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2005-1086

Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2005-1086

Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2005-0478

Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 an HTTP request with a long User-Agent header or 2 a long argument to an arbitrary PHP script...

CVE-2003-1110

The CVE-2003-1110 issue affects the Columbia SIP User Agent (sipc) 1.74 and older builds prior to sipc 2.0 (build 2003-02-21). The vulnerability arises in its SIP Session Initiation Protocol handling, where crafted INVITE messages can cause a denial of service or allow execution of arbitrary code...

CVE-2003-1110

The Session Initiation Protocol SIP implementation in Columbia SIP User Agent sipc 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test...

CVE-2004-1729

Nihuo Web Log Analyzer 1.6 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the User-Agent HTTP header, potentially allowing an attacker to inject arbitrary scripts or HTML. The issue is documented across CVE/NVD entries with the same vector and impact (I: PARTI...

Advanced Guestbook 2.22.3 - User-Agent HTML Injection

Advanced Guestbook 2.22.3 - User-Agent HTML Injection source: https://www.securityfocus.com/bid/14391/info Advanced Guestbook is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

Woltlab Burning Book addentry.php SQL Injection

Advisory Information -------------------- Advisory name : Woltlab Burning Book addentry.php SQL Injection Discovered by : drhankey / it-security23.net Vendor Name : Woltlab Vendor Homepage : http://www.woltlab.de Software : Woltlab Burning Book Lite Vulnerability Type : Cross-Site-Scripting...

TWiki 20030201 search.pm Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================= TWiki 20030201 search.pm Remote Command Execution Exploit ========================================================= !/usr/bin/perl "tweaky.pl" v. 1.0 beta 2 Proof of concept for TWiki...

Multiple networking devices fail to set the "Secure" attribute of a cookie

Overview Multiple vendors' networking devices fail to set the "Secure" cookie attribute and could disclose sensitive information about a user's HTTP session. Description Many networking devices provide a built-in web server, which may support the HTTPS protocol. When a user logs into the device...

CVE-2004-1657

Cross-site scripting XSS vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the 1 User Agent or 2 Referrer HTTP headers...

icecast crossite scripting

Crossite scripting in User-Agent...

Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer

--------------------------------------------------------------------------- Cross-Site Scripting XSS in Nihuo Web Log Analyzer --------------------------------------------------------------------------- Author: Audun Larsen larsen at xqus dot com Date: Aug 20, 2004 Affected software:...

CVE-2004-1729

Cross-site scripting XSS vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

HTTP 'User-Agent' Request Header Detection

Binary data 1735.prm...

Icecast list.cgi User-Agent XSS

Binary data 2136.prm...

Xitami testssi.ssi HTTP Header XSS

The remote Xitami server is distributed with a script for testing server-side includes, '/testssi.ssi'. This script is vulnerable to a cross-site scripting issue when sent a request with a malformed Host or User-Agent header. An attacker may exploit this flaw the steal the authentication...