434 matches found
GeSHi 1.0.x - XML Parsing Remote Denial of Service
GeSHi 1.0.x - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources...
bcoosexoops-xss.txt
bcoos & E-xoops DevTracker module two variables XSS vendor url: http://www.bcoos.net Vendor url: http://www.e-xoops.com Advisore: http://lostmon.blogspot.com/2008/02/ bcoos-and-e-xoops-devtracker-module-two.html vendor notify:yes exploits available: YES bcoos and E-xoops are two content-community...
[SA21445] NetCommons Unspecified Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
JVN#51301450 NetCommons cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. As a result, a remote attacker could forge the web page contents. Solution Products Affected NetCommons 1.0.8 and earlier...
SUSE-SA:2006:022: MozillaThunderbird
The remote host is missing the patch for the advisory SUSE-SA:2006:022 MozillaThunderbird. Various security bugs have been fixed in Mozilla Thunderbird, bringing it up to bugfix level of version 1.0.8. This also catches up on earlier Thunderbird security releases. %NASLMINLEVEL 70300 C Tenable...
SUSE-SA:2006:021: MozillaFirefox,mozilla
The remote host is missing the patch for the advisory SUSE-SA:2006:021 MozillaFirefox,mozilla. A number of security issues have been fixed in the Mozilla browser suite and the Mozilla Firefox browser. These problems could be used by remote attackers to gain privileges, gain access to confidential...
firefox security update
CentOS Errata and Security Advisory CESA-2006:0328 Updated firefox packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include...
[SA15336] OpenBB Cross-Site Scripting and SQL Injection Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: OpenBB Cross-Site Scripting and SQL Injection...
OpenBB SQL Injection & Cross-site Scripting Vulnerability
Open Bulletin Board www.openbb.com Vulnerable versions: 1.0.8 OpenBB read.php SQL Injection Vulnerability Proof of concept: http://www.example.com/openbb/read.php?action=lastpost&TID=' http://www.example.com/openbb/read.php?TID=' OpenBB member.php Cross-Site Scripting Vulnerability Proof of...
OpenBB 1.0.8 - Read.php SQL Injection
OpenBB 1.0.8 - Read.php SQL Injection source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
OpenBB 1.0.8 - 'Read.php' SQL Injection
source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
OpenBB 1.0.8 - member.php Cross-Site Scripting
OpenBB 1.0.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
OpenBB 1.0.8 - 'member.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...
