318 matches found
ADOdb Cross-Site Scripting Vulnerability
ADODB is a compatible database application program interface API, a variety of databases can be. A cross-site scripting vulnerability exists in ADOdb. Because the program fails to properly filter user-supplied input, an attacker could exploit the vulnerability to execute arbitrary script code in...
Infobae Website Cross-Site Scripting Vulnerability
Infobae is a famous news site. A cross-site scripting vulnerability exists in Infobae Website. An anonymous attacker is able to inject malicious script code into a specially crafted request to hijack the session of a webmaster or user...
Let's PHP! p++BBS HTML Injection Vulnerability
Let's PHP! p++BBS is a bulletin board system. Let's PHP! p++BBS suffers from an HTML injection vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious data is viewed...
Cisco TelePresence ISDN Gateway Device Cross-Site Request Forgery Vulnerability
The Cisco TelePresence ISDN Gateway is a telepresence ISDN video gateway solution. The solution provides high-definition video, content sharing, and encryption. A cross-site request forgery vulnerability exists in the Cisco TelePresence ISDN Gateway appliance, which allows remote attackers to...
IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2015-04462)
IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects an organization internally and externally, allowing employees, customers and suppliers to access internal data through the platform. A cross-site scripting vulnerability exists in...
Drupal Keyword Research Module Cross-Site Request Forgery Vulnerability
Drupal is an open source content management system.Keyword Research is a module that provides keywords for searches. A cross-site request forgery vulnerability exists in the Drupal Keyword Research module that allows remote attackers to construct malicious URIs, trick users into parsing them, and...
Open-Xchange Server and Open-Xchange AppSuite Cross-Site Scripting Vulnerabilities
Open-Xchange Server and Open-Xchange AppSuite OX AppSuite are both products of Open-Xchange, Inc. Open-Xchange Server is a semi-open-source project primarily used for the development of collaborative software; OX AppSuite is a suite of web cloud Open-Xchange Server is a semi-open source project...
CVE-2015-1176-xss-osticket
CVE-2015-1176-xss-osticket Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in osTicket Ticket system Affected Software : osTicket Affected Versions: 1.9.4 and possibly below Vendor Homepage : http://osticket.com/ Vulnerability Type : Cross-site Scripting...
PHP Pro Bid 5.2.4/6.04 Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/31263/info PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...
PhpWebGallery 1.4.1 category.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17421/info PHPWebGallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
CVE-2013-0025
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."...
CVE-2010-3900
Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...
New vulnerabilities in CMS SiteLogic
Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Local File Inclusion, Directory Traversal и Full path disclosure уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. SQL Injection: http://site/?fun=-120or20version3E4 Local File Inclusion через SQL Injection:...
Unfixed Redirect vulnerability at www.orbit.net.tr
Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.orbit.net.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If yo...
Another You tube clone script vulnerability
ChX Security | Advisory 2 | ============= - "Generic YouTube Clone Script - XSRF: Arbitrary Code Injection" - Data | ====== Author: Pepepistola Pepepistolaatchxsecuritydotorg Program: Generic YouTube Clone Script Severity: Moderately Critical Type of Advisory: Mid Disclosure Affected/Tested...
CVE-2004-1537
Cross-site scripting XSS vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter...
CVE-2002-1126
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunloa...