4077 matches found
Easy Address Book Web Server format string vulnerability
Format string vulnerability on URI request parsing...
Easy Address Book Web Server 1.2 - Remote Format String
Easy Address Book Web Server 1.2 - Remote Format String source: https://www.securityfocus.com/bid/19842/info Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the...
CVE-2006-4056
Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...
CVE-2006-4056
CVE-2006-4056 relates to multiple SQL injection vulnerabilities in the authentication process of the Address Book software: katzlbt (The Address Book 1.04e and earlier) and The Address Book Reloaded before 2.0-rc4. The flaw allows remote attackers to manipulate SQL via the (1) username or (2) pas...
CVE-2006-4056
Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...
CVE-2006-4056: Undefined Security Weakness
Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...
CVE-2006-3900
Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2006-3900
Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2006-3900
The CVE-2006-3900 entry describes a Cross-site Scripting (XSS) vulnerability in TP-Book, affecting guestbook.php in version 1.00 and earlier. The issue arises via the name parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P)...
CVE-2006-3900: Undefined Security Weakness
Cross-site scripting XSS vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter...
[Full-disclosure] TP-Book <= 1.00 Cross Site Scripting Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: TP-Book = 1.00 Cross Site Scripting Vulnerabilities Release Date: 2006/07/25 Last Modified: 2006/07/25 Author: Tamriel tamriel at gmx dot net Application: TP-Book = 1.00 Risk: Low Vendor Status: not contacted Vendor Site:...
Hack ultimate case of the Black God five law Secret line Arena-vulnerability warning-the black bar safety net
Inclusive of all things the night is full of mystery...... At night is the hackers of the world, because the evening Internet, the Internet speed was fast, coupled with the webmaster spiritually LAX. Due to various reasons, have staged a lot of this shouldn't have happened...... 1 2 o'clock sharp...
CVE-2006-2882
Multiple cross-site scripting XSS vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 GBOOKUNAME, 2 GBOOKEMAIL, 3 GBOOKCITY, 4 GBOOKCOU, 5 GBOOKWWW, and 6 GBOOKMESS form fields...
CVE-2006-2882
The CVE-2006-2882 entry describes multiple cross-site scripting (XSS) vulnerabilities in ASPScriptz Guest Book 2.0 and earlier, exploitable through submit.asp via six fields (GBOOK_UNAME, GBOOK_EMAIL, GBOOK_CITY, GBOOK_COU, GBOOK_WWW, GBOOK_MESS). Affected software is ASPScriptz Guest Book 2.0 an...
CVE-2006-2882: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 GBOOKUNAME, 2 GBOOKEMAIL, 3 GBOOKCITY, 4 GBOOKCOU, 5 GBOOKWWW, and 6 GBOOKMESS form fields...
CVE-2006-2837
Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...
Cross site scripting
Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...
CVE-2006-2837
CVE-2006-2837 describes a cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book. The flaw allows remote attackers to inject arbitrary web script or HTML through certain comment fields on the Sign Our GuestBook page, most likely the x_Comments parameter to guestbookadd.asp. The conn...
CVE-2006-2837
Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...
CVE-2006-2837: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the xComments parameter to guestbookadd.asp...