cpaint202XSS.txt

GulfTech Security Research February 9, 2006 Vendor : CPAINT URL : http://sourceforge.net/projects/cpaint Version : CPAINT = 2.0.2 Risk : Cross Site Scripting Description: CPAINT Cross-Platform Asynchronous INterface Toolkit is a multi-language toolkit that helps web developers design and implemen...

CPAINT AJAX Library Cross Site Scripting

GulfTech Security Research February 9, 2006 Vendor : CPAINT URL : http://sourceforge.net/projects/cpaint Version : CPAINT = 2.0.2 Risk : Cross Site Scripting Description: CPAINT Cross-Platform Asynchronous INterface Toolkit is a multi-language toolkit that helps web developers design and implemen...

CVE-2005-4810

Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service crash via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest AJAX...

[SA16462] CPAINT Ajax Toolkit Unspecified Command Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2613

CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...

CVE-2005-2613

Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...

CVE-2005-2613

Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...

Vulnerability found in CPAINT Ajax Toolkit

I am the original author of the CPAINT Ajax Toolkit http://cpaint.sourceforge.net/. Last night we found a vulnerability affecting all versions of CPAINT prior to v1.3-SP which is the patched version of the software that can allow a user with malicious intent to execute server or ASP/PHP commands...

CVE-2005-2042

Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...

CVE-2005-2042

The CVE-2005-2042 entry concerns an XSS vulnerability in ajax-spell prior to 1.8. The issue arises from allowing injection of arbitrary script/HTML via event handlers (e.g., onmouseover) in HTML tags, enabling remote attacker-controlled script execution. Affected component: ajax-spell (web UI) be...

CVE-2005-2042

Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...

CVE-2024-33471

An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...