46 matches found
Opera Browser Multiple Vulnerabilities October-10 (Windows)
The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnoct10win.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities October-10 Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...
BBSXP 2008 Cross Site Scripting
first, my name is liscker, not lis + cker. Im chinese. thank you. BBSXP is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Bloginator不安全Cookie和SQL注入漏洞
BUGTRAQ ID: 34187 CVECAN ID: CVE-2009-1050,CVE-2009-1049 Bloginator是一套PHP脚本,允许用户在网站上显示、添加、编辑和删除文章。 Bloginator没有正确地验证认证cookie,远程攻击者可以通过修改identifyYourself cookie参数绕过安全限制获得非授权访问。以下是有漏洞的代码段: URL www.site.com/bloginator/articleCall.php global $name,$password,$returnLink; $pname =...
QwikiWiki 1.41.5 - login.php Multiple Cross-Site Scripting Vulnerabilities
QwikiWiki 1.41.5 - login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17064/info QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)
-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...
CVE-2002-0709
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs...