7137 matches found
Microsoft Internet Explorer 0-day vulnerability
Unfiltered shell characters on executed URL: protocol application handler...
Trillian multiple security vulnerabilities
Buffer overflow and unfiltered shell characters on aim:// URL processing...
CVE-2007-3837
Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...
CVE-2007-3799
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
CVE-2007-3799
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
SquirrelMail PGP plugin unfiltered shell characters
Unfiltered shell characters on external application invocation in fpr parameter of keyringmain.php script and in different places...
TippingPoint IPS - Unicode Character Detection Bypass
TippingPoint IPS - Unicode Character Detection Bypass source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to...
TippingPoint IPS - Unicode Character Detection Bypass
source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable...
CVE-2007-3596
CVE-2007-3596 affects phpVideoPro up to version 0.8.7 (before 0.8.8). The vulnerability is in inc/vul_check.inc where the sess_id parameter accepts non‑alphanumeric characters. The impact is described as unknown (no explicit impact or attack vector details beyond a likely cross‑site scripting sug...
CVE-2005-4852: Undefined Security Weakness
The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '' underscore, which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for...
CVE-2007-3596: Undefined Security Weakness
inc/vulcheck.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sessid parameter, which has unknown impact and remote attack vectors, probably cross-site scripting XSS...
Fujitsu-Siemens ServerView code execution
Shell characters filtering problem in Web interface "ping" CGI script...
Yoggie Pico Pro security appliance code execution
Unfiltered Web interface shell characters...
Microsoft Internet Explorer DoS
Browser DoS on the page in domain with special characters...
CVE-2007-3365
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
Apple Safari for Windows commands execution
Shell characters problem on protocol handlers invocation. Format string vulnerability...
CVE-2007-3201
Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...
Information disclosure
Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, probably related to '' and '' characters...
Authentication flaw
Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if t...
