12763 matches found
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Invision Power Board: user existance check...
Cross site scripting
Cross-site scripting XSS vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2009-0971
Cross-site scripting XSS vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2009-0971
CVE-2009-0971 is an XSS flaw in futomi’s CGI Cafe Access Analyzer CGI Standard (Version 3.8.1 and earlier). Public records describe an arbitrary-script execution in the user’s browser via unknown vectors, with fixes in Version 4.x (4.0.0 and later, e.g., 4.0.2). Affected software: Access Analyzer...
Design/Logic Flaw
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962: Undefined Security Weakness
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
CVE-2009-0962
CVE-2009-0962 affects Futomi's CGI Cafe MP Form Mail CGI eCommerce (Ver 1.3.0 and earlier) and CGI Professional (Ver 3.2.2 and earlier). A remote attacker can gain administrative privileges (impersonate an administrator) through unspecified attack vectors. Remediation is to update to the vendor’s...
CVE-2009-0971: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2009-0962
Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Vulnerability scanning tools nikto use of experience-vulnerability warning-the black bar safety net
http://www.cirt.net/ official website site http://www.feelids.com/ Author:swap A simple scan of the target basic WEB basic preparation Information, Server, PHP parser and other version information perl nkito.pl –h 192.168.0.1 Multi-port scanning Perl nikto.pl –h 192.168.0.1 –p 8 0, the 8 8, a 4 4...
JVN#23558374 Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x)
Access Analyzer CGI Standard Version provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI Standard Version Ver. 3.x contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: DoS against user's account and server...
MP Form Mail CGI vulnerability allows third party to gain administrative privileges
Overview MP Form Mail CGI from futomi's CGI Cafe contains a vulnerability that allows an attacker to gain administrative privileges. MP Form Mail CGI from futomi's CGI Cafe is a software for sending contents entered into an HTML form via email. MP Form Mail CGI contains a vulnerability that allow...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting. Athree CMS: information leak, SQL injection, DoS...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting...
Cross site scripting
The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting XSS attacks via unspecified vectors...
