4174 matches found
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...
CentOS 5 : kernel (CESA-2008:0957)
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...
Joomla! Component com_kk - Blind SQL Injection
Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+ http://localhost/index.php?option=comkk&kat=1 and 1=1 FALSE-...
Sendmail Update Patches Memory Leak Flaws
Version 8.14.4 of Sendmail, the open source mail transfer agent MTA, includes fixes for several security vulnerabilities including some integer overflows, memory leaks and for the SSL NUL character problem disclosed in mid 2009. Read the full article. The H Security...
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
Joomla WebcamXP Cross Site Scripting
Joomla Component comwebcamxp Cross Site Scripting Vulnerabilities Author : Pyske Name : comwebcamxp Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice :...
Mandriva Security Advisory MDVSA-2009:189-1 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Joomla TP Jobs SQL Injection
Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ » http://www.netchimera.com/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...
Joomla Airmonoblock Blind SQL Injection
Joomla Component comairmonoblock Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and All Cyber-Warrior Name : comairmonoblock Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Demo Vuln. : TRUE+...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Joomla! Component FacileForms - Cross-Site Scripting
Joomla Component comfacileforms Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Name : comfacileforms Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice : Zararl...
Joomla Carman Cross Site Scripting
Joomla Component comcarman Cross Site Scripting Vulnerability author :Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comcarman Bug Type : Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir...
PHP 5.2.4 money_format 存在字符检查不严格
No description provided by source...
CVE-2009-4142
The htmlspecialchars function in PHP before 5.2.12 does not properly handle 1 overlong UTF-8 sequences, 2 invalid ShiftJIS sequences, and 3 invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting XSS attacks by placing a crafted byte sequence before a special...
Joomla Component Event Manager Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Joomla Component Event Manager Blind SQL Injection Vulnerability ================================================================ Joomla Component Event Manager Blind SQL...
Joomla City Portal Blind SQL Injection
Joomla Component City Portal Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component City Portal Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : - »...
Joomla! Component Event Manager - Blind SQL Injection
Joomla! Component Event Manager - Blind SQL Injection Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : +...
USN-870-1: PyGreSQL vulnerability
Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...