82 matches found
XUL scripts bypass content-policy checks — Mozilla
Mozilla add-on developer and community member Wladimir Palant reported that content-loading policies were not checked before loading external script files into XUL documents. The severity of this problem would depend on the reasons behind the content policy check, which include privacy from "web...
OpenX 2.6.4 multiple vulnerabilities
OpenX multiple vulnerabilities An advisory by EnableSecurity in collaboration with Acunetix. Advisory URL: http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt Version: OpenX 2.6.4 and older versions Description: OpenX is an online advertising web application written in PHP tha...
Sql injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
Sql injection
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6365
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
Sql injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
CVE-2008-6364
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6366
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
CVE-2008-6366
SQL injection vulnerability CVE-2008-6366 affects Ad Server Solutions Affiliate Software Java 4.0: the logon.jsp page (and related logon_process.jsp) processes user inputs for username and password in a way that allows arbitrary SQL execution. This is exploitable remotely and could lead to data d...
CVE-2008-6365
CVE-2008-6365 describes a SQL injection vulnerability in Ad Server Solutions’ Ad Management Software (Java) affecting logon.jsp and related logon_processing.jsp. The issue can allow remote attackers to modify/execute SQL via the uname/pass parameters. Root cause per description is improper handli...
CVE-2008-6364
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6365
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
CVE-2008-6366
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
CVE-2008-6364
CVE-2008-6364 describes an SQL injection in logon_process.jsp of Ad Server Solutions Banner Exchange Solution Java. The vulnerability allows remote attackers to execute arbitrary SQL commands via the uname and pass parameters, potentially impacting confidentiality, integrity, and availability. Re...
Multiple Ad Server Solutions Products - logon_processing.jsp SQL Injection
Multiple Ad Server Solutions Products - logonprocessing.jsp SQL Injection source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL...
Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection
source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
CVE-2003-1395
Technical details about CVE-2003-1395 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2003-1395
Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a response to the ad server...
[SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 Author: Maksymilian Arciemowicz cXIb8O3 Date: 13.3.2005 from securityreason.com TEAM - --- 0.Description --- phpAdsNew is an open-source ad server, with an integrated banner management interface a...