559 matches found
XM Easy Personal FTP Server 4.3 - 'USER' Remote Buffer Overflow (PoC)
XM EASY PERSONAL FTP SERVER v4.3 http://www.securityfocus.com/archive/1/432960/30/0/threaded Buffer Overflow Vulnerability PoC [email protected] import socket import struct import time import sys buff='USER '+'A'5000+'\r\n' if lensys.argv!=3: print "+ Usage: %s \n" %sys.argv0 sys.exit0 try: print...
XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC
Exploit for unknown platform in category dos / poc ========================================================== XM Easy Personal FTP Server 1.0 Port Remote Overflow PoC ========================================================== !/usr/bin/perl ---------------------------------------------------- Nam...
XM Easy Personal FTP Server 1.0 - Port Remote Overflow (PoC)
XM Easy Personal FTP Server 1.0 - Port Remote Overflow PoC !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT valu...
XM Easy Personal FTP Server 1.0 (Port) Remote Overflow PoC
No description provided by source. !/usr/bin/perl ---------------------------------------------------- Name : XM Easy Personal FTP Server Version : 4.2 ---------------------------------------------------- Type : dos / remote Descritpion : buffer overflow for huge PORT value...
CVE-2005-4256
Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...
CVE-2005-4256
CVE-2005-4256 describes a cross-site scripting (XSS) vulnerability in ASP-DEV XM Forum RC3, specifically in forum.asp where the forum_title parameter can inject arbitrary script/HTML. Affected item is XM Forum RC3 (forum.asp handling). The core issue is an XSS in the forum_title parameter, enabli...
CVE-2005-4256
Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...
CVE-2005-4256: Undefined Security Weakness
Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...
ASP-DEV XM Forum - forum.asp Cross-Site Scripting
ASP-DEV XM Forum - forum.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15858/info XM Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15858/info XM Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...
ASP-DEv XM Forum IMG Tag Script Injection Vulnerability
The remote web server contains an ASP script which is vulnerable to a cross site scripting issue. Description : The remote host appears to be running the ASP-DEV XM Forum. There is a flaw in the remote software which may allow anyone to inject arbitrary HTML and script code through the BBCode IMG...
CVE-2004-1896
Heap-based buffer overflow in inmod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 .xm mod media file...
CVE-2005-1008
Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...
CVE-2005-1008
Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...
CVE-2005-1008
CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...
CVE-2005-1008: Undefined Security Weakness
Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser. XM Forum RC3 is report...
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
ASP-DEV XM Forum RC3 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script...
