2626 matches found
CVE-2007-4581: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...
WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection Vulnerability
No description provided by source. Title: WBB2-Addon: Acrotxt v1 show Remote SQL Injection Bug by: D4m14n 11/07/2007 Page: www.damians-world.dl.am // www.team-internet.dl.am Dork: inurl:acrotxt.php wbb SQL-Injection: http://target/path/acrotxt.php?show=SQL Example:...
WBB2-Addon: Acrotxt 1.0 - show SQL Injection
WBB2-Addon: Acrotxt 1.0 - show SQL Injection Title: WBB2-Addon: Acrotxt v1 show Remote SQL Injection Bug by: D4m14n 11/07/2007 Page: www.damians-world.dl.am // www.team-internet.dl.am Dork: inurl:acrotxt.php wbb SQL-Injection: http://target/path/acrotxt.php?show=SQL Example:...
WBB2-Addon: Acrotxt v1 (show) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ WBB2-Addon: Acrotxt v1 show Remote SQL Injection Vulnerability ================================================================ Title: WBB2-Addon: Acrotxt v1 show Remote SQL...
Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution
Mozilla Firefox before version 41 allowed users to install unsigned browser extensions from arbitrary web servers. This module dynamically creates an unsigned .xpi addon file. The resulting bootstrapped Firefox addon is presented to the victim via a web page. The victim's Firefox browser will pop...
Mozilla Fizzle addon crossite access
No description provided...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Coppermine Photo Gallery = 1.2.2b Nuke Addon Include Vulnerability =====================================================================...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
CVE-2006-3751: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component comhtmlarea3xtd-c for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2006-0927
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2006-0927
CVE-2006-0927 describes multiple XSS vulnerabilities in the JGS-XA/JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x. The issue arises in the parameters (1) userid of jgs_galerie_slideshow.php and jgs_galerie_scroll.php, and (2) katid of jgs_galerie_slideshow.php, allowing r...
CVE-2006-0927: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...
CVE-2005-4094
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script...
USN-149-1: Firefox vulnerabilities
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious web site to spoof the contents of other web sites. CAN-2005-1937 In several places the browser user interface did not...
Firefox Remote Compromise Technical Details
Firefox Remote Compromise Technical Details Before I start, I need to say that this thing has been patched on Mozilla's server. If you take a look at any of the extension install pages on their site, you will see that the install function has a bunch of random letters and numbers after it. Even...
CVE-2005-0829
Cross-site scripting XSS vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the 1 username or 2 userpass parameters...
CVE-2005-0829
Cross-site scripting XSS vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attackers to inject arbitrary web script or HTML via the 1 username or 2 userpass parameters...
[SA12709] yappa-ng Unspecified "Show Random Image" Vulnerability
TITLE: yappa-ng Unspecified "Show Random Image" Vulnerability SECUNIA ADVISORY ID: SA12709 VERIFY ADVISORY: http://secunia.com/advisories/12709/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: yappa-ng 2.x http://secunia.com/product/3989/ DESCRIPTION: Georg Ragaz has...
IPINSIGHT Detection
The remote host is using the IPINSIGHT program. You should ensure that the user intended to install IPINSIGHT as it is sometimes silently installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12015; scriptversion"1.16";...