152 matches found
The vulnerability of the microprogramming software of the DELL SonicWALL Universal Management Appliance em5000 and the DELL SonicWALL Global Management System allows a intruder to execute arbitrary Java code.
The vulnerability of the CLIServer microprogramming software for automated network management by DELL SonicWALL Universal Management Appliance em5000, as well as the DELL SonicWALL Global Management System, is related to the lack of measures for input data cleansing. Exploiting this vulnerability...
The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code with system privileges.
The vulnerability of the Tivoli Storage Manager FastBack data management program is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with system privileges...
NetworkScanViewer v1.0.4 is out !
NetworkScanViewer is a GUI application designed to help view the results of nessus v4 and nmap v5 scan results. It combines the functionality of both NessusViewer and NmapViewer. The application loads the scan data from nessus and nmap XML, does some data cleansing, then displays the results on t...
Cross site scripting
Cross-site scripting XSS vulnerability in Lycos Tripod htmlGEAR guestGEAR aka Guest Gear allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element,...
CVE-2006-2808
Cross-site scripting XSS vulnerability in Lycos Tripod htmlGEAR guestGEAR aka Guest Gear allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element,...
phplistSQL.txt
----------------------------------------- PhpList Sql Injection and Path Disclosure ----------------------------------------- Vulnerabilities --------------- 1 There is an sql injection in the id parameter of publichtml/lists/admin/?page=admin&id=INJECT HERE 2 Because of the heavy use of classes...
beehiveVulns.txt
-------------------------------------- Beehive Forum Multiple Vulnerabilities -------------------------------------- Beehive Forum is affected by sql injection, xss, and path disclosure. Vulnerabilities --------------- 1 The $GET "webtag" parameter is on almost every page of the product and is...
Beehive Forum Multiple Vulnerabilities
-------------------------------------- Beehive Forum Multiple Vulnerabilities -------------------------------------- Beehive Forum is affected by sql injection, xss, and path disclosure. Vulnerabilities --------------- 1 The $GET "webtag" parameter is on almost every page of the product and is...
CVE-2005-0723
Cross-site scripting XSS vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php...
CVE-2004-2411
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...