4589 matches found
Unfixed XSS vulnerability at www.randyblue.com
Security researcher TreX, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.randyblue.com, which at the time of submission ranked 7879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently...
Cross site scripting
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
CVE-2007-5796
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
CVE-2007-5796
The CVE-2007-5796 entry describes an XSS flaw in the Blue Coat ProxySG management console, exploitable by modifying the URL used to load Certificate Revocation Lists. Affected versions are ProxySG < 4.2.6.1 and 5.x
CVE-2007-5796
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
Two XSS on Blue Coat ProxySG Management Console
PR07-29: Two XSS on Blue Coat ProxySG Management Console Vulnerability found: 23 July 2007 Vendor informed: 20 August 2007 Vulnerability fixed: 29 October 2007 Advisory publicly released: 1 November 2007 Severity: Medium Description: Blue Coat SG400 is vulnerable to a couple of XSS holes...
Blue Coat ProxySG crossite scripting
Crossite scripting with administration interface...
Directory traversal
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence...
CVE-2007-5776
Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence...
CVE-2007-5777
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...
CVE-2007-5777
CVE-2007-5777 affects Blue-Collar Productions i-Gallery 3.4. The vendor’s application stores sensitive information under the web root with insufficient access control, permitting remote attackers to download a file (igallery.mdb) containing a base64-encoded password via a direct request. The NVD ...
ProCheckUp Security Advisory 2007.29
PR07-29: Two XSS on Blue Coat ProxySG Management Console Vulnerability found: 23 July 2007 Vendor informed: 20 August 2007 Vulnerability fixed: 29 October 2007 Advisory publicly released: 1 November 2007 Severity: Medium Description: Blue Coat SG400 is vulnerable to a couple of XSS holes...
Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities
Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26286/info Blue Coat ProxySG Management Console is prone to two cross-site scripting vulnerabilities because the application fails to properly sanitize...
Unfixed XSS vulnerability at blue-1.hevra.haifa.ac.il
Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting blue-1.hevra.haifa.ac.il, which at the time of submission ranked 20905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It...
Exploits PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
No description provided by source. !usr/bin/perl egs-fuckphpbluedragon300.pl Copyright 2007 Emanuele Gentili [email protected] www.emanuele-gentili.com This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the...
egs-fuckphpbluedragon300.pl.txt
!usr/bin/perl egs-fuckphpbluedragon300.pl Copyright 2007 Emanuele Gentili www.emanuele-gentili.com This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the Licens...
PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability (0dd exploit)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit is attached. E. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 GNU/Linux Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGwRXDmErIuzAYjw8RApkJAKCkxFrH2XmwTS37D0B8BmaFe47EkwCgs5Uc 6XtVfkHyqOVv51uylzwT3WQ= =49Nv -----E...
Remote file inclusion
PHP remote file inclusion vulnerability in publicincludes/pubblocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958...
Immunity Canvas: PBD_INCLUDE
Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...