835 matches found
BookMarks Favourites Script - 'id' SQL Injection
|| | | BookMarks Favourites Script viewgroup.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : IQ-SecuritY WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script :...
[SECURITY] Fedora 8 Update: chmsee-1.0.0-4.31.fc8
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
[SECURITY] Fedora 9 Update: chmsee-1.0.1-5.fc9
A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...
Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities
No description provided by source. Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities POC & Vulns RFI In frame.php In Line 46 include "$GETframefile"; Ex : /frame.php?framefile=Shell LFI In /read/frame.php In Line 46 include "../$GETframefile"; Ex :...
Fedora 9 : phpMyAdmin-2.11.9.1-1.fc9 (2008-8370)
This update by upstream to phpMyAdmin 2.11.9.1 solves a not yet clearly specified code execution vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Export type...
Ol BookMarks Manager 0.7.5 - Local File Inclusion / Remote File Inclusion / SQL Injection
Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities POC & Vulns RFI In frame.php In Line 46 include "$GETframefile"; Ex : /frame.php?framefile=Shell LFI In /read/frame.php In Line 46 include "../$GETframefile"; Ex : /frame.php?framefile=../../../../../../etc/passwd SQL Injection ...
Ol Bookmarks Manager 0.7.5 Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl olbookmarks = 0.7.5 Local File Inclusion Vulnerability Script site:...
Ol BookMarks Manager 0.7.5 - Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl olbookmarks = 0.7.5 Local File Inclusion Vulnerability Script site: http://sourceforge.net/project/showfiles.php?groupid=24742 Vuln...
Ol Bookmarks Manager 0.7.5 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= Ol Bookmarks Manager 0.7.5 Local File Inclusion Vulnerability ============================================================= :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; '...
DoS vulnerability in Firefox
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в Mozilla Firefox. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/Firefox20DoS20Exploit.html Уязвима верси...
CVE-2008-4083
Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...
XSS in bookmarks plugin
The bookmarking code under the url http://localhost:8080/plugins/socialbookmarking/updatebookmark.action is vulnerable to XSS attacks using the spaceKey parameter: submitting the following code will execute javascript: spaceKey=%22%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E%22%3E IMPORTANT:...
CVE-2008-4083
Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...
CVE-2008-4083
The CVE-2008-4083 entry documents a Cross-site Scripting (XSS) vulnerability in the Bookmarks plugin for Brim 2.0. The issue arises when an authenticated user adds an item via index.php, with the name parameter not properly sanitized, allowing arbitrary web script or HTML to be injected. Affected...
CVE-2008-4083: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...
Brim 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...
Brim 2.0.0 - SQL Injection Cross-Site Scripting
Brim 2.0.0 - SQL Injection Cross-Site Scripting || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
Active PHP Bookmarks 'id' SQL注入漏洞
BUGTRAQ ID: 30757 CNCAN ID：CNCAN-2008082201 Active PHP Bookmarks是一款基于PHP的WEB应用程序。 Active PHP Bookmarks不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'viewgroup.php'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Active PHP Bookmarks Active PHP Bookmarks 1.1.2 目前没有解决方案提供：...