2739 matches found
WordPress Core 1.2 - 'categories.php?cat_ID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11268/info It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. Wordpress 1.2 is reported vulnerable, however, other...
WordPress < 1.2.2 Multiple XSS
The remote version of WordPress is vulnerable to cross-site scripting attacks due to a failure of the application to properly sanitize user- supplied URI input. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be...
Zinf Audio Player 2.2.1 - Local Buffer Overflow
Zinf Audio Player 2.2.1 - Local Buffer Overflow / -------------------------------Advisory---------------------------------- Luigi Auriemma I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version of Zinf. In short, Zi...
MySQL libmysqlclient Prepared Statements API Overflow
You are running a version of MySQL 4.1.x, which is older than version 4.1.5. There is a flaw in the remote version of this software that could allow an attacker to crash the affected service, thus denying access to legitimate users. C Tenable Network Security, Inc. include"compat.inc"; if...
Subversion < 1.0.8 / 1.1.0-rc4 mod_authz_svn Unreadable Path Metadata Information Disclosure
You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4. A flaw exists in older version, in the apache module modauthzsvn, which fails to properly restrict access to metadata within unreadable paths. An attacker can read metadata in unreadable paths, which can contain...
Apache <= 2.0.51 Satisfy Directive Access Control Bypass
The remote host is running Apache web server 2.0.51. It is reported that this version of Apache is vulnerable to an access control bypass attack. This issue occurs when using the 'Satisfy' directive. An attacker may gain unauthorized access to restricted resources if access control relies on this...
Apache < 2.0.51 mod_ssl Rewrite Rules DoS
Binary data 2276.prm...
Icecast list.cgi User-Agent XSS
The remote server runs a version of Icecast that is as old or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of...
Gaim < 0.82 MSN Protocol Buffer Overflow
Binary data 2160.prm...
Gaim < 0.59 Web Mail Account Information Disclosure
Binary data 2163.prm...
MySQL < 4.0.21 mysqlhotcopy Insecure Temporary File Creation
You are running a version of MySQL which is older than version 4.0.21. Mysqlhotcopy is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker could potentially...
Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution
source: https://www.securityfocus.com/bid/10993/info Mantix is reportedly susceptible to a remote server-side script execution vulnerability. This vulnerability only presents itself when PHP is configured on the hosting computer with 'registerglobals = on'. When PHP is configured to register glob...
mIRC < 6.1 DCC Server Protocol Nickname Disclosure
Binary data 1862.prm...
Neon < 0.23.8 Status Response Control Character Inclusion Vulnerability (deprecated)
Binary data 1778.prm...
CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval
Binary data 1219.prm...
Apache mod_auth_mysql < 1.10 SQL Injection
Binary data 1492.prm...
Apache mod_auth_pgsql < 0.9.6 SQL Injection
Binary data 1490.prm...
PuTTY < 0.55 modpow Function Arbitrary Code Execution
Binary data 1998.prm...