370 matches found
vCard PRO 0 search.php event_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/18699/info VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
Belchior Foundry VCard 2.9 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15207/info vCard is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote...
vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
vCard PRO 3.1 - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : vCard PRO 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeri...
openSUSE Security Update : roundcubemail (openSUSE-SU-2014:0365-1)
roundcubemail was updated to 0.9.5 to fix bugs and security issues. Fixed security issues : - CVE-2013-6172: vulnerability in handling session argument of utils/save-prefs New upstream release 0.9.5 bnc847179 CVE-2013-6172 - Fix failing vCard import when email address field contains spaces - Fix...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 calendar displayname to part.choosecalendar.rowfields.php or 2 part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or 3 unspecified...
CVE-2012-4397
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 calendar displayname to part.choosecalendar.rowfields.php or 2 part.choosecalendar.rowfields.shared.php in apps/calendar/templates/; or 3 unspecified...
Multiple stored XSS - ownCloud
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.1 allow remote attackers to inject arbitrary web script or HTML via the calendar displayname to part.choosecalendar.rowfields.php part.choosecalendar.rowfields.shared.php in apps/calendar/templates/ unspecified vectors to...
Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
This host is missing a critical security update according to Microsoft Bulletin MS10-096. OpenVAS Vulnerability Test $Id: secpodms10-096.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Address Book Remote Code Execution Vulnerability 2423089 Authors: Sooraj KS Copyright: Copyright c 2010...
Microsoft Windows Address Book Remote Code Execution Vulnerability (2423089)
This host is missing a critical security update according to Microsoft Bulletin MS10-096. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2010-4109
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
Cross site scripting
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
CVE-2010-4109
Cross-site scripting XSS vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file...
HPSBMI02614 SSRT100344 rev.2 - HP webOS Contacts Application, Remote Execution of Arbitrary Code
Potential Security Impact Remote execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP webOS Contacts Application. This vulnerability could be exploited to execute arbitrary HTML or JavaScript. RESOLUTION The vulnerability can be resolved...
horde-base -- XSS: VCARD attachments vulnerability
The Horde team reports: The major changes compared to Horde version 3.3.10 are: Fixed XSS vulnerability when viewing details of a vCard...
Windows Mobile 6.1 and 6.5 Double Free Denial of Service
No description provided by source. Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT:...
[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability
Vendor: Microsoft Product: Windows Mobile Vulnerability: Double Free Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil nver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com Vulnerability Details and Analysis: The...
Windows Mobile 6.1 / 6.5 Denial Of Service
Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...
Microsoft Windows Address Book Insecure Library Loading Vulnerability
This host is installed with Microsoft Address Book and is prone to insecure library loading vulnerability. This NVT has been replaced by NVT secpodms10-096.nasl OID:1.3.6.1.4.1.25623.1.0.901169. OpenVAS Vulnerability Test $Id: gbmsaddressbookinsecurelibloadvuln.nasl 5368 2017-02-20 14:34:16Z cfi ...
Windows Mobile 6.1 and 6.5 Double Free Denial of Service
Exploit for windows platform in category dos / poc ======================================================== Windows Mobile 6.1 and 6.5 Double Free Denial of Service ======================================================== Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of...