1348 matches found
CVE-2007-3383
CVE-2007-3383 is an XSS flaw in Apache Tomcat’s SendMailServlet (examples/jsp/mail/sendmail.jsp) affecting Tomcat 4.0.0–4.0.6 and 4.1.0–4.1.36. The vulnerability allows remote attackers to inject arbitrary script/HTML via the From field (and possibly other fields) during error-message generation....
Unfixed XSS vulnerability at playwithyourmind.com
Security researcher FiSh, has submitted on 25/07/2007 a cross-site-scripting XSS vulnerability affecting playwithyourmind.com, which at the time of submission ranked 480457 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2007-3265
CVE-2007-3265 is a Cross-site scripting (XSS) vulnerability in the Samples component of IBM WebSphere Application Server (WAS) up to version 6.1.0.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: IBM WAS (Samples co...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
Exploit for unknown platform in category web applications ============================================================ Wordpress plugin wordTube = 1.43 wpPATH RFI Vulnerability ============================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23676/info MoinMoin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...
CVE-2007-0928
The CVE-2007-0928 issue concerns Virtual Calendar where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download an encoded password via a direct request for pwd.txt, indicating improper access restrictions on sensitive files. Reported...
ovidentia5x-rfi.txt
Author : H0tTurk- Author2: Hotturk web app : OVidentia 5.x Series Remote File İnclude My Site : WwW.H0tTurk.CoM Referance:http://www.securityfocus.com/archive/1/456893 Thanx : DrmaxVirus,GencTurk,Madconfig,EnjexioN,TiT,Kurtefendy,LuciferCihan,Arabian-FighterZ,Sawturk,Ayyıldız,OzelHarekatTim...
CVE-2006-6977
CVE-2006-6977 affects FreeTextBox’s Basic Toolbar Selection. The vulnerability is a cross-site scripting flaw in the A tag where a javascript: URI in href or onmouseover can be used to run arbitrary JavaScript in a remote context. Affected component is the toolbar’s HTML output; the underlying is...
CVE-2006-6954
The CVE-2006-6954 entry affects Flock beta 1 0.7, where a remote attacker can cause a denial of service (application crash) by delivering a web page that contains a large number of nested marquee tags. This vulnerability is related to CVE-2006-2723. The provided documents do not specify a remedia...
CVE-2007-0156
The CVE-2007-0156 entry concerns M-Core where the application stores its database under the web document root, enabling information disclosure if an attacker directly requests db/uyelik.mdb. Affected component: the database file accessed via the web root; root cause: improper placement of the dat...
EditTag 1.2 - edittag_mp.pl?file Arbitrary File Disclosure
EditTag 1.2 - edittagmp.pl?file Arbitrary File Disclosure source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
shopsite-xss.txt
Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: ShopSite Shopping Cart Multiple XSS Risk: Medium ShopSite is the easiest-to-use shopping cart software for small to medium-sized businesses. ShopSite ecommerce shopping cart is one of the most user-friendly...