4270 matches found
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
Joomla WebcamXP Cross Site Scripting
Joomla Component comwebcamxp Cross Site Scripting Vulnerabilities Author : Pyske Name : comwebcamxp Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice :...
Mandriva Security Advisory MDVSA-2009:189-1 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Joomla TP Jobs SQL Injection
Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ » http://www.netchimera.com/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...
Joomla Airmonoblock Blind SQL Injection
Joomla Component comairmonoblock Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and All Cyber-Warrior Name : comairmonoblock Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Demo Vuln. : TRUE+...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Joomla! Component FacileForms - Cross-Site Scripting
Joomla Component comfacileforms Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Name : comfacileforms Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice : Zararl...
Joomla Carman Cross Site Scripting
Joomla Component comcarman Cross Site Scripting Vulnerability author :Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comcarman Bug Type : Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir...
PHP 5.2.4 money_format 存在字符检查不严格
No description provided by source...
CVE-2009-4142
The htmlspecialchars function in PHP before 5.2.12 does not properly handle 1 overlong UTF-8 sequences, 2 invalid ShiftJIS sequences, and 3 invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting XSS attacks by placing a crafted byte sequence before a special...
Joomla Component Event Manager Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Joomla Component Event Manager Blind SQL Injection Vulnerability ================================================================ Joomla Component Event Manager Blind SQL...
Joomla City Portal Blind SQL Injection
Joomla Component City Portal Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component City Portal Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : - »...
Joomla! Component Event Manager - Blind SQL Injection
Joomla! Component Event Manager - Blind SQL Injection Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : +...
USN-870-1: PyGreSQL vulnerability
Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...
GRUB 2 password bypass
Error in password protection allows to boot system by guessing first character of the password...
Mandriva Linux Security Advisory : libneon (MDVSA-2009:315)
A vulnerability has been found and corrected in libneo : neon before 0.28.6, when OpenSSL is used, does not properly handle a '' NUL character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers vi...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)
Security issues were identified and fixed in firefox 3.0.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...
Talking about the failure of the word Trojan horse-vulnerability warning-the black bar safety net
Author: FoolishQiang the original address: A lot of friends in the database, or the configuration file inserted into the word, but can't connect. I summed up for three reasons. Reason one: the case of transition Case transition, this is a bit like DZ's that take shell's method, is that you of the...