Cross site scripting

Cross-site scripting XSS vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-4464

CVE-2009-4464 : Cross-site scripting (XSS) in Active Business Directory 2, via searchadvance.asp, allows remote attackers to inject arbitrary web script/HTML through the search parameter. The vulnerability arises from insufficient sanitization of user input, enabling stored/reflective-like effect...

CVE-2009-4464

Cross-site scripting XSS vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Active Server Page Bulletin Board Database Disclosure

======================================================================================== | Title : AspBB - Active Server Page Bulletin Board DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -0021377181886...

Microsoft IIS Semi-Colon Execution

Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...

AspBB - Active Server Page Bulletin Board DB Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== AspBB - Active Server Page Bulletin Board DB Download Vulnerability ===================================================================...

AspBB - Active Server Page Bulletin Board DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : AspBB - Active Server Page Bulletin Board DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum ...

CVE-2009-4437

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to wishlist.asp and the 2 linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1...

Sql injection

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to wishlist.asp and the 2 linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1...

Sql injection

Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp, different vectors than CVE-2007-1706...

CVE-2009-4437

CVE-2009-4437 affects Active Auction House 3.6. It has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via the catid parameter to wishlist.asp and the linkid parameter to links.asp (vector 1 may overlap CVE-2005-1029). The description notes the issue is i...

Active Business Directory 2 - searchadvance.asp Cross-Site Scripting

Active Business Directory 2 - searchadvance.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/41995/info Active Business Directory is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

SMF (Simple Machine Forum) 1.1.11 XSS Vulnerabilities

No description provided by source. || Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to...

SMF (Simple Machine Forum) 1.1.11 XSS - Discovered by : Khashayar Fereidani

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...

Simple Machines Forum 1.1.11 Cross Site Scripting

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-14.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Active Photo Gallery 6.2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability‏ ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ? T!ME: 10:22 pm ? Home: WwW.xP10.M...

Active Auction House 3.6 Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: wishlist.asp catid Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Auction House v 3.6 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 10:06 pm ? Home: WwW.xP10.ME ? contact...

CVE-2009-4354

TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0939, allow remote attackers to inject arbitrary web script or HTML via the 1 From, 2 To, 3 Cc, and 4 Bcc parameters...