CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

CVE-2006-2386

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

Block Windows Address Book Contact Record Vulnerability (MS06-076)

A remote code execution vulnerability has been discovered in Microsoft Outlook Express. The vulnerability is due to a buffer overflow error in the Windows Address Book WAB functions within Outlook Express. Windows Address Book is an application used for storing contact information. A remote...

WAB Files (CVE-2006-2386)

Windows Address Book WAB is a component of Microsoft Windows operating systems that lets users keep a single list of contacts that can be shared by multiple programs. It is most commonly used by Microsoft Outlook Express. The vulnerability is due to a buffer overflow error in the Windows Address...

CVE-2006-2386: Undefined Security Weakness

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

Microsoft Internet Explorer / Outlook Express multiple security vulnerabilities

Memory corruption on Javascript errors processing and Javascript normalize function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book WAB parsing...

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Description Microsoft Outlook Express is prone to a remote code-execution vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. A remote attacker can exploit this issue to execute arbitrary code with the privileges of...

CVE-2006-6371

The CVE-2006-6371 entry documents a Cross-site scripting (XSS) vulnerability in JAB Guest Book’s pbguestbook.php, exploitable via the author parameter. Affected component: pbguestbook.php in the JAB Guest Book. Root cause: lack of proper input sanitization on the author field leading to script/HT...

CVE-2006-6372

CVE-2006-6372 describes multiple XSS vulnerabilities in pbguestbook.php of JAB Guest Book 20061205, allowing remote attackers to inject arbitrary web script or HTML via the topic or message parameters. Documented CVSS v2 base score 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P). No remediation details are prov...

CVE-2006-6372

Multiple cross-site scripting XSS vulnerabilities in pbguestbook.php in JAB Guest Book 20061205 allow remote attackers to inject arbitrary web script or HTML via the 1 topic or 2 message parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-6371: Undefined Security Weakness

Cross-site scripting XSS vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter...

CVE-2006-6372: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in pbguestbook.php in JAB Guest Book 20061205 allow remote attackers to inject arbitrary web script or HTML via the 1 topic or 2 message parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

XSS in JAB Guest Book

Script Name: JAB Guest Book Authors: [email protected] Website: James Barnsley Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: JAB Guest Book is a free guest book written in PHP, it works using flat fil...

Mac OS X Multiple Vulnerabilities (Security Update 2006-007)

The remote host is running a version of Mac OS X which does not have the security update 2006-007 applied. Security Update 2006-007 contains several security fixes for the following programs : - AirPort - ATS - CFNetwork - Finder - Font Book - Font Importer - Installer - OpenSSL - PHP - PPP - Sam...

efsStream.txt

/ ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy Address Book Web Server is vulnerable to file stream exploi...

CVE-2006-5715

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...

CVE-2006-5715: Undefined Security Weakness

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5667

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...

EUVD-2006-5652

Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pblang parameter to 1 admin.php and 2 pbook.php...