atomphotoblog-xss.txt

Application: Atom Photoblog Web Site: http://atomphotoblog.ilenvo.de/ Versions: 1.0.9 and below Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File: http://www.secvsn.com/content/Advisories/sr-060607-atomphotoblog.html...

Cross site scripting

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2007-3134

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3134

CVE-2007-3134 affects Atom PhotoBlog

CVE-2007-3134

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

CVE-2007-3135

CVE-2007-3135 is an XSS vulnerability affecting Atom Photoblog (versions 1.0.9 and earlier) in atomPhotoBlog.php. The tag parameter is injectable, enabling remote attackers to inject arbitrary web script or HTML. The vulnerability is documented across multiple sources (including NVD) with a base ...

CVE-2007-3135

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2007-3135: Undefined Security Weakness

Cross-site scripting XSS vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter...

CVE-2007-3134: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Your Name, 2 Your Homepage, and 3 Your Comment fields, when using "Approve Comments."...

Atom Photoblog 1.0.11.0.9 - AtomPhotoblog.php Multiple Input Validation Vulnerabilities

Atom Photoblog 1.0.11.0.9 - AtomPhotoblog.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/24363/info Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in...

Atom Photoblog 1.0.1/1.0.9 - 'AtomPhotoblog.php' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/24363/info Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. These issues include multiple HTML-injection vulnerabilities and a...

CVE-2007-0754

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

CVE-2007-0754: Undefined Security Weakness

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

[Full-disclosure] Apple QuickTime udta ATOM Integer Overflow

Apple QuickTime udta ATOM Integer Overflow By Sowhat of Nevis Labs Date: 2007.03.06 http://www.nevisnetworks.com http://secway.org/advisory/AD20070306.txt http://secway.org/advisory/AD20060512.txt CVE: CVE-2007-0714 Vendor: Apple Inc. Affected Versions: Apple QuickTime versions 7.1.5 Overview: We...

Apple QuickTime UDTA atom integer overflow

Overview Apple QuickTime contains an integer overflow in handling UDTA atoms, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple QuickTime User Data UDTA Atoms allow a user to "... define and store data associated with a QuickTim...

Integer overflow

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...

CVE-2007-0714

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...

CVE-2007-0714

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...

CVE-2007-0714: Undefined Security Weakness

Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom UDTA with an Atom size field with a large value...