CVE-2005-4177: Undefined Security Weakness

Cross-site scripting XSS vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter...

Magic List Pro - view_archive.cfm?ListID SQL Injection

Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...

Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and...

Magic Book v2.0 Professional Vuln.

Magic Book v2.0 Professional Vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magic-book-v20-professional-vuln.html vendor:www.cfmagic.com/products/magicbook.cfm affected version:v.2.0 and prior Product Description: Magic Book Professional...

CVE-2004-2608

SmartWebby Smart Guest Book stores SmartGuestBook.mdb aka the "news database" under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account...

CVE-2004-2608

The CVE-2004-2608 issue affects SmartWebby Smart Guest Book, where SmartGuestBook.mdb is stored under the web document root with insufficient access control. This permits remote attackers to access unencrypted administrator credentials (username/password). The risk is limited to exposure of crede...

CVE-2004-2608: Undefined Security Weakness

SmartWebby Smart Guest Book stores SmartGuestBook.mdb aka the "news database" under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account...

Sylpheed < 2.0.4 Address Book LDIF Import Overflow

Binary data 3285.prm...

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3384

The CVE-2005-3384 entry describes an SQL injection vulnerability in Techno Dreams Guest Book script. The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. Documented impact indicates unauthenticated access with p...

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3384: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3037

CVE-2005-3037 is an XSS vulnerability in Handy Address Book Server 1.1. The issue allows remote attackers to inject arbitrary script or HTML via the SEARCHTEXT parameter in a demos URL, indicating improper input handling in the web interface. The connected documents provide the vulnerability desc...

CVE-2005-3037

Cross-site scripting XSS vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL...

CVE-2005-3037: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL...

[SA16798] Handy Address Book Server SEARCHTEXT Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...

CVE-2005-2858: Undefined Security Weakness

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...