4322 matches found
CVS management/tracker XSS
The motivation field of the CVS application page is not passed through checkmarkup on display. A malicious user may use this field to insert and execute XSS Cross Site Scripting. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. Revoking the...
CVE-2006-5738
Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...
[DRUPAL-SA-2006-024] Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues
------------------------------------------------------------------------ ---- Drupal security advisory DRUPAL-SA-2006-024 ------------------------------------------------------------------------ ---- Project: Drupal core Date: 2006-Oct-18 Security risk: Moderately critical Exploitable from: Remot...
FreeBSD : drupal -- multiple XSS vulnerabilities (b2383758-5f15-11db-ae08-0008743bf21a)
The Drupal Team reports : A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...
drupal -- multiple XSS vulnerabilities
The Drupal Team reports: A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...
DRUPAL-SA-2006-024 - Drupal core - Multiple cross site scripting vulnerabilities
Multiple XSS cross site scripting vulnerabilities have been discovered. A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS...
Search Keywords cross site scripting vulnerability
It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. Versions affected Drupal core is not affected. If you do not use the...
Userreview cross site scripting vulnerability
It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. Versions affected Drupal core is not affected. If you do not use the...
MS Windows Media Player Plugin Overflow Exploit (MS06-006)(3)
Exploit for unknown platform in category remote exploits ============================================================= MS Windows Media Player Plugin Overflow Exploit MS06-0063 ============================================================= !/usr/bin/perl wmp-profiteer.pl Exploiting 'Non-Critical'...
Breakthrough in the users permissions broken star Lann-bug warning-the black bar safety net
users permissions are really so low? Our school room has restore card, USB are also sealed, and the BIOS has a super-long password, the external network is also nowhere. Installed VB and the star LAN multimedia network classroom. But with my generation is not going to use VB coding to a broken...
CVE-2004-2622
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access...
CVE-2003-1245
The CVE-2003-1245 issue affects Mambo Site Server (CMS) in version 4.0.12, where index2.php allows a remote attacker to gain administrator access by sending a URL with session_id set to the MD5 hash of a valid session cookie. Root cause is improper validation of cookies, enabling session imperson...
guestbook-2.2.txt
Guestbook 2.2 webapplication PHP, MySQL appears vulnerable to SQL Injection granting the attacker administrator access. Target : http://www.example.com/GuestbookTarget/admin.php Username: ' or 1=1 / Password: NothingBlank Its Working On Advanced Guestbook 2.2 version 2.3.1 will fix this...
Advanced Guestbook 2.2 ( SQL Injection Exploit )
Guestbook 2.2 webapplication PHP, MySQL appears vulnerable to SQL Injection granting the attacker administrator access. Target : http://www.example.com/GuestbookTarget/admin.php Username: ' or 1=1 / Password: NothingBlank Its Working On Advanced Guestbook 2.2 version 2.3.1 will fix this...
MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)
No description provided by source. / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON [email protected] Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus...
Naxtor E-directory 1.0 - 'default.asp' SQL Injection
source: https://www.securityfocus.com/bid/14469/info Naxtor E-directory is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation results in gaining full...
Ultimate PHP Board 1.81.9 - Weak Password Encryption
Ultimate PHP Board 1.81.9 - Weak Password Encryption source: https://www.securityfocus.com/bid/13975/info Ultimate PHP Board is prone to a weak password encryption vulnerability. This issue is due to a failure of the application to protect passwords with a sufficiently effective encryption scheme...
Interspire ArticleLive Multiple Remote Vulnerabilities (XSS, Auth Bypass)
The remote host is running a version of Interspire ArticleLive that suffers from the following vulnerabilities : - A session handling flaw allowing a remote attacker to gain administrator access. - Multiple cross-site scripting vulnerabilities. The session handling vulnerability can be exploited ...
XAMPP - Insecure Default Password Disclosure
XAMPP - Insecure Default Password Disclosure source: https://www.securityfocus.com/bid/13131/info An insecure default password disclosure vulnerability affects XAMPP. This issue is due to a failure of the application to properly secure access to default passwords. An attacker may leverage this...