Cross site scripting

Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2729

Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2728

Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...

CVE-2006-2728

CVE-2006-2728 is an XSS flaw in Photoalbum B&W 1.3, specifically in the file superalbum/index.php. The vulnerability arises when an attacker supplies a crafted value for the pic parameter, enabling the injection of arbitrary web script or HTML. Documents identify the affected component but do not...

CVE-2006-2728

Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...

CVE-2006-2729

The CVE-2006-2729 entry details a cross-site scripting (XSS) vulnerability in the Photoalbum B&W 1.3 package, specifically in the file a​s superalbum/index.php, where the gal parameter can be abused to inject arbitrary script or HTML. The affected component is the web application’s index handler ...

CVE-2006-2729

Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Xss exploit in Photoalbum B&W v1.3

Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...

Photoalbum BW 1.3 - index.php Cross-Site Scripting

Photoalbum BW 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...

Photoalbum B&W 1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browse...

[security bulletin] HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00555516 Version: 5 HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Releas...

DMCounter 0.9.2 -b - Kopf.php Remote File Inclusion

DMCounter 0.9.2 -b - Kopf.php Remote File Inclusion source: https://www.securityfocus.com/bid/17756/info DMCounter is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

DMCounter 0.9.2 -b - 'Kopf.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17756/info DMCounter is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...

[security bulletin] HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd(1) Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00619550 Version: 2 HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd1 Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date...

[security bulletin] HPSBUX02105 SSRT061134 rev.1 - HP-UX Running swagentd Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00622788 Version: 1 HPSBUX02105 SSRT061134 rev.1 - HP-UX Running swagentd Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2006-0078

Multiple cross-site scripting XSS vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 shout variables to a shout.php, or the 3 title and 4 message variables to b guestbook.php...

CVE-2006-0078

CVE-2006-0078 affects B-net Software 1.0. The described vulnerability is multiple cross-site scripting (XSS) where an attacker can inject arbitrary script/HTML via (1) name and (2) shout to shout.php, or (3) title and (4) message to guestbook.php. The description specifies the affected 1.0 versio...

CVE-2006-0078

Multiple cross-site scripting XSS vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 shout variables to a shout.php, or the 3 title and 4 message variables to b guestbook.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 shout variables to a shout.php, or the 3 title and 4 message variables to b guestbook.php...

EV0010.txt

New eVuln Advisory: B-net Software Multiple XSS Vulnerabilities --------------------Summary---------------- Software: B-net Software Sowtware's Web Site: http://sourceforge.net/projects/b-net/ Versions: 1.0 Critical Level: Moderate Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploi...