Internet Explorer 9.10 - XSS Protection Filter Vulnerabilities

Document Title: =============== Internet Explorer 9.10 - XSS Protection Filter Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=729 Release Date: ============= 2012-10-20 Vulnerability Laboratory ID VL-ID:...

Internet Explorer 9.10 - XSS Protection Filter Vulnerabilities

Document Title: =============== Internet Explorer 9.10 - XSS Protection Filter Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=729 Release Date: ============= 2012-10-19 Vulnerability Laboratory ID VL-ID:...

Cross site scripting

The t3libdiv::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting XSS protection mechanism and inject arbitrary web script or HTML via non printable characters...

CVE-2012-1608

TYPO3 CVE-2012-1608 affects the t3lib_div::RemoveXSS API. Vulnerable in TYPO3 versions 4.4.0–4.4.13, 4.5.0–4.5.13, 4.6.0–4.6.6, 4.7, and 6.0. The issue allows remote attackers to bypass the XSS protection and inject arbitrary web script or HTML via non-printable characters. Connected documents co...

CVE-2012-1965

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting XSS protection mechanisms via a feed:javascript: URL...

Cross site scripting

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting XSS protection mechanisms via a feed:javascript: URL...

Postfixadmin 2.3.4 SQL Injection / Cross Site Scripting

Advisory ID: CSA-12002 Title: Multiple vulnerabilities in postfixadmin Product: postfixadmin Version: 2.3.4 and probably prior Vendor: www.postifixadmin.org Vulnerability type: SQL injection, XSS Vendor notification: 2012-01-10 Public disclosure: 2012-01-26 postfixadmin version 2.3.4 and probably...

WordPress Zotpress 4.4 SQL Injection

Exploit Title: WordPress Zotpress plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- if $mzrapiuserid == false && $mzrinclude == false && isset$GET'apiuserid' && pregmatch"/^0-9+$/", $GET'apiuserid' $mzrapiuserid = trim$GET'apiuserid';...

CVE-2010-2768

Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting XSS...

dotDefender protection bypass

It's possible to bypass XSS protection...

phpAuthent 0.2.1 - SQL Injection

phpAuthent 0.2.1 - SQL Injection phpAuthent 0.2.1 SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : phpAuthent http://phpauth.sourceforge.net/ Download : http://phpauth.sourceforge.net/download.php Vulnerable File...

CVE-2009-4387

CVE-2009-4387 : In ManageEngine Password Manager Pro (PMP) ≤ 6.1 Build 6104, the XSS protection in ShowInContentAreaAction.do relies on case‑sensitive input checks, allowing remote attackers to inject arbitrary script/HTML via the searchtext parameter and other inputs. This bypasses the intended ...

Mandrake Security Advisory MDVSA-2009:183 (apache-mod_security)

The remote host is missing an update to apache-modsecurity announced via advisory MDVSA-2009:183. OpenVAS Vulnerability Test $Id: mdksa2009183.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:183 apache-modsecurity Authors: Thomas Reinke Copyright:...

CVE-2009-2704

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing a %00 encoded null byte...

Cross site scripting

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing a %00 encoded null byte...

Cross site scripting

CA SiteMinder allows remote attackers to bypass cross-site scripting XSS protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters...

CVE-2009-2704

The CVE-2009-2704 issue affects CA SiteMinder and related entries, where GET parameters could bypass J2EE XSS protections due to a %00 (encoded null byte). Root cause: improper filtering of user-supplied request parameters in SiteMinder, enabling bypass of XSS protections. Documented impact is by...

[ GLSA 200907-02 ] ModSecurity: Denial of Service

Gentoo Linux Security Advisory GLSA 200907-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200907-02 : ModSecurity: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200907-02 ModSecurity: Denial of Service Multiple vulnerabilities were discovered in ModSecurity: Juan Galiana Lara of ISecAuditors discovered a NULL pointer dereference when processing multipart requests without a part header nam...

ModSecurity Multiple Remote Denial of Service Vulnerabilities

This host is running ModSecurity and is prone to Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: gbmodesecurityremotedosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ ModSecurity Multiple Remote Denial of Service Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009...