Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

FileZilla多个格式串漏洞

FileZilla是一款免费的FTP客户端软件。 FileZilla处理用户名数据存在问题，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 如果用户名包含%字符，连接将会提示错误，而造成格式串攻击，可能以进程权限执行任意指令。 FileZilla 3.0 -beta4 FileZilla 3.0 -beta3 FileZilla 3.0 -beta2 FileZilla 3.0 -beta1 升级程序： FileZilla FileZilla 3.0 -beta1 FileZilla FileZilla3.0.0-beta5src.tar.bz2...

Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...

CVE-2006-1766

Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 getlang and 2 reporeid parameter in a index.php, 3 menuid parameter in b plugin.php and c forumthread.php, and 4 msgid parameter in forumthread.php...

CVE-2006-1711

Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the 1 changeMemberPortrait, 2 deletePersonalPortrait, and 3 testCurrentPassword methods, which allows remote attackers to modify portraits...

CVE-2005-3856

The Popular URL capability popularurls.cpp in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites...

CVE-2005-2339

Cross-site scripting XSS vulnerability in the Unicode version of msearch unicode-msearch 1.51U1-beta1, 1.51U1, and 1.52U1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2004-2158

SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter to 1 exit.php or 2 comment.php...