3428 matches found
CVE-2007-4021
Multiple cross-site scripting XSS vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...
CVE-2007-4021
CVE-2007-4021 affects Brain Book Software Secure 1.0.20070629 and earlier. The vulnerability is multiple XSS in login.php, exploitable via the (1) user and (2) pwd parameters, enabling remote attackers to inject arbitrary script/HTML into victims’ browsers. Root cause: reflected XSS in login hand...
Yahoo Messenger buffer overflow
Buffer overflow on oversized e-mail address in address buuok entry...
Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow
Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execu...
Microsoft Html Popup / Outlook Express Address Book ActiveX DoS
Crash on element displaying...
CVE-2005-4840
The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service NULL dereference and browser crash by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer...
CVE-2005-4840
The CVE-2005-4840 issue affects the Outlook Express Address Book control when used with Internet Explorer 6. The vulnerability arises from exploiting the OutlookExpress.AddressBook COM object in IE, leading to a NULL dereference and a browser crash (denial of service). Connected advisories corrob...
Stack overflow
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...
CVE-2007-2919
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control FlipViewerX.dll in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service crash or execute arbitrary code via long 1 UID, 2 Opf, 3 PAGENO, 4 LaunchMode, 5 SubID, 6 BookID, 7 LibraryID, 8...
Sql injection
Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter to a configurer.php, b connect.php, c delete.php, d delete2.php, e index.php, f infos.php,...
CVE-2007-2314
Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter to a configurer.php, b connect.php, c delete.php, d delete2.php, e index.php, f infos.php,...
CVE-2007-2314
CVE-2007-2314 : The provided documents describe multiple SQL injection vulnerabilities in Crea-Book 1.0 (and possibly earlier) when magic_quotes_gpc is disabled. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) pseudo or (2) passe parameter to any of the following ad...
CVE-2007-2314
Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter to a configurer.php, b connect.php, c delete.php, d delete2.php, e index.php, f infos.php,...
Cross site scripting
Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...
CVE-2007-2265
CVE-2007-2265 is an XSS vulnerability in YA Book 0.98-alpha, exploitable through the City field in a sign action in index.php. The available documents indicate remote script/HTML injection leading to partial confidentiality/integrity/availability impact as described by CVSS metrics, but no patch ...
CVE-2007-2265
Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...
YA Book Persistent XSS Bug
. . . . | . .| . .;/ || .| .net | .| "YA Book 0.98-alpha - Persistent XSS Vulnerability" by Omni 1 Infos --------- Date : 2007-04-23 Product : YA Book Version : 0.98-alpha - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/yabook - http://www.phpee.com/ Vendor Status ...
CVE-2007-2001
Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" background color field and other unspecified fields, which injects into config.inc.php3...
CVE-2007-1998
Direct static code injection vulnerability in HIOX Guest Book HGB 4.0 allows remote attackers to inject arbitrary PHP code via the Email field, which results in code execution through a direct request to gb.php...