6300 matches found
CVE-2007-1522
CVE-2007-1522 describes a double-free vulnerability in PHP’s session extension affecting PHP 5.2.0 and 5.2.1. The issue arises when an internal session storage module rejects illegal characters in a session identifier but calls the session identifier generator with an improper environment, causin...
Unfiltered shell characters in Amarok media player
Unfiltered shell characters on executing o external unzip command...
MS Internet Explorer (FTP Server Response) DoS Exploit (MS07-016)
Exploit for unknown platform in category dos / poc ================================================================= MS Internet Explorer FTP Server Response DoS Exploit MS07-016 ================================================================= !/usr/bin/perl MS 07-016 FTP Server Response PoC...
Unfixed XSS vulnerability at www.laney.peralta.edu
Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.laney.peralta.edu, which at the time of submission ranked 177547 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...
UBUNTU-CVE-2007-1329
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . dot characters adjacent to 1 users and 2 users/members strings, which are removed by blacklisting functions that filter the...
security flaw
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions...
The script pictures the back door without echo solutions-vulnerability warning-the black bar safety net
First of all, let us think about why the picture of the back door is not back obvious reason: as you know, we use the include contains picture, the interpreter will put the picture as a text document for searching and automatic parsing% %or??& gt;of the script. So what other html characters such...
CVE-2007-0995
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions...
CVE-2006-7027
Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...
CVE-2006-7027
Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...
Design/Logic Flaw
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service CPU consumption via a response with a large number of newline characters...
CVE-2007-1075
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service CPU consumption via a response with a large number of newline characters...
CVE-2007-1075
The CVE-2007-1075 entry concerns TurboFTP 5.30 Build 572. The vulnerability arises when a remote server sends a response containing a large number of newline characters, leading to CPU consumption and a denial of service. The affected component is the FTP server handling network responses; the un...
Mandrake Linux Security Advisory : libneon0.26 (MDKSA-2007:013)
An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow remote malicious servers to cause a crash via a URI with non-ASCII characters. This vulnerability may only exist on 64bit systems. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...
Mozilla browsers "location.hostname" cross-domain vulnerability
Overview Mozilla-based browsers contain a cross-domain vulnerability, which may allow an attacker to access data in other sites. Description Mozilla uses a same origin security model to maintain separation between browser frames from different sources. This model is designed to prevent code in on...
Cross site scripting
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
CVE-2007-0769
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
XSS_Vulnerability_EasymoBlog.txt
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in "img.php" by Umberto Caldera. Discovered Date: 30/01/2007 Author: Tal Argoni talargoni at gmail d0t com Product Vendor: http://sourceforge.net/project/showfiles.php?groupid=88633 Ver: easymoblog-0.5.1 Details: EasyMoblog is...