536 matches found
CVE-2009-0424: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in sign1.php in AN Guestbook ANG before 0.7.7 allows remote attackers to inject arbitrary web script or HTML via the country parameter, which is not properly handled in 1 administrator/manage.php or 2 administrator/trash.php. NOTE: some of these details are...
Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability
No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...
FreeBSD Ports: horde, horde-php5
The remote host is missing an update to the system as announced in the referenced advisory. VID 396ee517-a607-11d9-ac72-000bdb1444a4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-3847
Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3847
Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3847: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in AN Guestbook ANG before 0.7.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-2414
Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...
CVE-2008-2414
The CVE-2008-2414 entry describes a Cross-Site Scripting (XSS) vulnerability in AN Guestbook (ANG) 0.4, specifically in send_email.php. The issue allows remote attackers to inject arbitrary web script or HTML via the postid parameter, implying an input/output handling flaw that potentially enable...
CVE-2008-2414
Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...
CVE-2008-2414: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in sendemail.php in AN Guestbook ANG 0.4 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...
AN Guestbook 0.4 - send_email.php Cross-Site Scripting
AN Guestbook 0.4 - sendemail.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/29254/info AN Guestbook ANG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
CVE-2002-2378: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon : in the query string, which is inserted into the resulting error page...
Remote file inclusion
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0591
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0591
CVE-2007-0591 describes a PHP remote file inclusion in Vu Le An Virtual Path (VirtualPath) 1.0. The vulnerability occurs in configure.php via the phpbb_root_path parameter, enabling remote PHP code execution. Documents do not specify affected versions beyond 1.0, impact details beyond the describ...
CVE-2007-0591: Undefined Security Weakness
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
Create your own simple Backdoor-vulnerability warning-the black bar safety net
We all know nc is a powerful and flexible hacking tools, he can do many things, such as a telnet client port, such as the invasion of time to bounce back the shell, such as scanning...... But have you ever wondered will he build into a service-level Backdoor? Now much better with me as the rookie...
CVE-2006-0680
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...
The black ice of the campus to pick up broilers Edition-vulnerability warning-the black bar safety net
The famous black ice firewall, I believe you warrior Diamondback they have heard of it! It is by virtue of its superior anti-black abilities and become dear Internet users friends travel home, surf the Internet essential good product. (As if in to it for advertising。。。。 Oh that we today refer to...