7417 matches found
CVE-2006-5504
Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter...
CVE-2006-5504: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter...
SMF-xss.txt
title: Simple Machines Forum SMF XSS issue author: Jose Carlos Norte discovered by: Jose Carlos Norte 1. introduction Simple machines forum is a popular scalable free bulletin board system written in php over mysql database, the url of the project: http://www.simplemachines.org/ 2. XSS problem SM...
CVE-2006-4676
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file...
CVE-2006-4676
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file...
CVE-2006-4676: Undefined Security Weakness
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to obtain sensitive information by decoding the log file...
TIBCO Rendezvous <= 7.4.11 Password Extractor Local Exploit
Exploit for unknown platform in category local exploits =========================================================== TIBCO Rendezvous tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions =v7.4.11 Author: Andres Tarasco atarasco @ sia.es Url: http://www.514.es + Tibco Logfile...
TIBCO Rendezvous 7.4.11 - Password Extractor
TIBCO Rendezvous 7.4.11 - Password Extractor / Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64valc : -1...
TIBCO Rendezvous 7.4.11 - Password Extractor
/ Exploit: TIBCO RendezVous local password extractor version tibco.exe c:\rvrd.db Tibco RendezVous Password Dumper Affected versions include define DECODE64c isasciic ? base64valc : -1 static const char base64val = -1, -...
(seamonkey): DOS/arbitrary code execution vuln with vcards
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a VCard that contains invalid base64 characters...
CVE-2006-2481: Undefined Security Weakness
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting CVE-2005-36...
security flaw
Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service crash via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow...
DEBIAN-CVE-2006-3804
Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service crash via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow...
(seamonkey): DOS/arbitrary code execution vuln with vcards
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service hang and possibly execute arbitrary code via a VCard that contains invalid base64 characters...
Freeze Greetings Cards PWD.txt
SOFTWARE: ========= Freeze Greetings http://www.scriptsez.net/ DESCRIPTION: ============ google dork = "Powered by Freeze Greetings" default password path http://www.site.com/freeze or path/PWD.txt pwd file's password is encode the base64. pwd encode the base64 cracker and login to...
CVE-2006-3006
Cross-site scripting XSS vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter...
CVE-2006-3006
Cross-site scripting XSS vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter...
CVE-2006-3006: Undefined Security Weakness
Cross-site scripting XSS vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter...
iFoto v0.20-06/06/06
iFoto v0.20-06/06/06 Homepage: http://ifoto.ireans.com/ Effected files: XSS Vulnerability: The dir path to show the image is base 64 encoded, so to attempt this XSS example we encode our codein base64. The code we'll be using is javascript in an iframe tag. IFRAME...