11039 matches found
Webmoney Advisor ActiveX Remote DoS Exploit
No description provided by source. html Pwnage Page object classid='clsid:3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840' id='target' /object script language='vbscript' targetFile = C:\Program Files\WebMoney Advisor\wmadvisor.dll prototype = Sub Redirect ByVal url As String memberName = Redirect progid =...
Microsoft IE 5.0/5.5 and OE 5.5 XML Stylesheets Active Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2633/info A vulnerability exists in the handling of XML stylesheets in Internet Explorer and Outlook Express. If active scripting is disabled in all security zones, IE and OE will still allow script to run if it is...
Google AD Sync Tool - Exposure of Sensitive Information Vulnerability
No description provided by source. Sense of Security - Security Advisory - SOS-13-001 Release Date. 03-Apr-2013 Last Update. - Vendor Notification Date. 03-Sep-2012 Product. Google Active Directory Sync GADS Tool Platform. Windows, Linux, Solaris Affected versions. All versions up to 3.1.3 Severi...
Active Web Helpdesk 2 - (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...
Active Trade 2 - (default.asp catid) Remote SQL Injection Vulnerability
No description provided by source. Title : Active Trade Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactivetrade Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=32 Vuln. Username :...
Active Classifieds 1.0 Arbitrary Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system. An origin validation error exists in the Free Edition of Active Classifieds that may allow remo...
Microsoft IIS 4.0/5.0 Chunked Encoding Transfer Heap Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/4485/info A heap overflow condition in the 'chunked encoding transfer mechanism' related to Active Server Pages has been reported for Microsoft IIS Internet Information Services. This condition affects IIS 4.0 and IIS 5.0...
Active Auction House ItemInfo.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13034/info Active Auction House is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in a SQL query. Successfu...
Microsoft Windows Media Player 7.0 .WMS Arbitrary Script Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1976/info Windows Media Player is an application used for digital audio, and video content viewing. It is possible for a user running Windows Media Player 7 to enable a skin .wms file and unknowingly execute an embedded...
Active Calendar 1.2 data/y_3.php css Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Active Calendar 1.2 data/mysqlevents.php css Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Active Calendar 1.2 data/m_2.php css Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Active Web Mail 4 - (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact...
Microsoft Active Movie Control 1.0 Filetype Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1221/info The Microsoft Active Movie Control a multimedia ActiveX control will download files of any type specified in the control parameters in an HTML document, regardless of whether or not they are a valid media type. ...
py software active webcam webserver 4.3/5.5 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12778/info Active Webcam webserver is reported prone to multiple vulnerabilities. The following individual issues are reported: The first issue, a denial of service is reported to manifest when a request is received for a...
MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow
No description provided by source. MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast,...
ActivePerl 5.x,Larry Wall Perl 5.x Duplication Operator Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10380/info ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable. The issue is reported to exist due to a lack of...
Active Price Comparison 4 - (ProductID) Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home:...
Active PHP Bookmarks 1.0 APB.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23670/info Active PHP Bookmarks is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...
Active Business Directory 2 - Remote blind SQL Injection Vulnerability
No description provided by source. -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active Business Directory v 2 €xploit :...