CVE-2008-3328

Cross-site scripting XSS vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-3328

CVE-2008-3328 : Trac’s wiki engine before 0.10.5 has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script via unknown vectors. Connected advisories confirm the issue is shell-agnostic to input points in the wiki engine prior to 0.10.5. The available r...

CGI::Session CGISESSID Cookie值目录遍历漏洞

BUGTRAQ ID: 30267 CGI::Session是一个Perl5库，可提供可靠易用的模块化会话管理系统。 CGI::Session没有充分的过滤CGISESSID cookie值便将其用在了File驱动中创建会话数据文件的文件名。如果远程攻击者在cookie值中注入了目录遍历序列，就会导致File驱动从配置的会话数据目录以外的任意文件读取会话数据。 仅在满足了所有以下条件的情况下才可以利用这个漏洞： 1 Web应用使用了CGI::Session中的File驱动管理会话。 2 Web应用部署于基于Windows的系统。 3...

CVE-2008-3205

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

Directory traversal

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

CVE-2008-3205

CVE-2008-3205 is a directory traversal vulnerability in the Easy-Script Wysi Wiki Wyg 1.0 web app, exploitable via a dot-dot sequence in the c parameter of index.php to read arbitrary files. The NVD entry gives a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no aut...

CVE-2008-3205

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability

No description provided by source. --==+=========================================================+==-- --==+ Wizi Wiki Wig Local File Inclusion Vulnerability +==-- --==+=========================================================+==-- Discovered By: StAkeR [email protected] Discovered On: 10 Jul 200...

wysiwiki-lfi.txt

--==+=========================================================+==-- --==+ Wizi Wiki Wig Local File Inclusion Vulnerability +==-- --==+=========================================================+==-- Discovered By: StAkeR [email protected] Discovered On: 10 Jul 2008 Script Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...

CVE-2008-3023

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...

CVE-2008-3023

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...

CVE-2008-3023

Summary: CVE-2008-3023 is an XSS vulnerability in FreeStyle Wiki affecting 3.6.2 and earlier, and 3.6.3 dev3 and earlier, where Internet Explorer could execute arbitrary script via unspecified vectors. The condition is that IE-based rendering allows injected HTML/script, with impact described as ...

Code injection

Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information user names by reading the error message produced upon access to a nonexistent blog...

CVE-2008-1579

Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information user names by reading the error message produced upon access to a nonexistent blog...

CVE-2008-1579

CVE-2008-1579 affects Wiki Server in Apple Mac OS X 10.5 prior to 10.5.3. An information-disclosure vulnerability allows remote attackers to deduce valid user names by reading the error message when accessing a nonexistent blog. The issue is documented in multiple sources (NVD entry and related a...

CVE-2008-1579

Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information user names by reading the error message produced upon access to a nonexistent blog...

Apple Mac OS X 2008-003更新修复多个安全漏洞

BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...

FreeStyleWiki cross-site scripting vulnerability

Overview FreeStyleWiki, a Wiki clone program implemented in Perl, contains a cross-site scripting vulnerability. Impact An rbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking...

Trac cross-site scripting vulnerability

Overview Trac is a project management tool from Edgewall Software. InterAct Corp. provides a localized version of Trac in Japan. Trac wiki engine contains a cross-site scripting vulnerability which affects Microsoft Internet Explorer. Impact A remote attacker could possibly execute an arbitrary...