Unfixed XSS vulnerability at buyersguide.baselinemag.com

Security researcher OMEHA, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting buyersguide.baselinemag.com, which at the time of submission ranked 55359 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It i...

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

Code injection

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 is vulnerable to a remote-denial-of-service caused by processing long DHCP packets. This vulnerability affects the device’s network operation, and the available documents do not provide exploit details or explicit reme...

CVE-2006-2054

3Com Baseline Switch 2848-SFP Plus Model 3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service unstable operation via long DHCP packets...

[SA19756] 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service

TITLE: 3Com Baseline Switch 2848-SFP DHCP Potential Denial of Service SECUNIA ADVISORY ID: SA19756 VERIFY ADVISORY: http://secunia.com/advisories/19756/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: 3Com Baseline Switch 2848-SFP Plus...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4377

CVE-2005-4377 describes a cross-site scripting (XSS) vulnerability in the Page.asp component of Baseline CMS (version 1.95 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PageID or SiteNodeID parameters. The available records indicate an XSS ...

CVE-2005-4377

Cross-site scripting XSS vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 PageID and 2 SiteNodeID parameters...

CVE-2005-4378

CVE-2005-4378 is a SQL injection vulnerability in Page.asp of Baseline CMS 1.95 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. The reported CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentica...

CVE-2005-4378

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter...

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities

Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15961/info Baseline CMS is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacke...

Baseline CMS vuln.

Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...

CVE-2002-1762

MBSA 1.0 stores security scans in plaintext at C:\Documents and Settings\username\SecurityScans, potentially exposing sensitive system information to users able to run malicious ActiveX/Java content. The provided sources confirm the exact location and plaintext storage, with no additional exploit...

CVE-2002-1762

Microsoft Baseline Security Analyzer MBSA 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java...

CVE-2004-2091

The vulnerability entry CVE-2004-2091 concerns Microsoft Baseline Security Analyzer (MBSA) 1.2. Affected context: MBSA 1.2 may not correctly identify systems that have been patched but remain exploitable until a reboot, potentially giving administrators a false sense of security. Impact is descri...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...