5601 matches found
Multi-Page Comment System 1.1.0 - Insecure Cookie Handling
Multi-Page Comment System 1.1.0 - Insecure Cookie Handling --==+================================================================================+==-- --==+ Multi-Page Comment System 1.1.0 Insecure Cookie Handling +==--...
Multi-Page Comment System 1.1.0 - Insecure Cookie Handling
--==+================================================================================+==-- --==+ Multi-Page Comment System 1.1.0 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 15 MAY...
CVE-2008-2018
The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '' and '' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "user.password"...
CVE-2008-2021: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive...
Sql injection
SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1890
SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1890
SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1890
CVE-2008-1890 describes a SQL injection vulnerability in the Jom Comment 2.0 (build 345) component for Joomla!. The affected product is Jom Comment 2.0 for Joomla!, and the root cause is SQL injection via unspecified vectors, enabling remote attackers to execute arbitrary SQL commands. The vulner...
CVE-2008-1890: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Breakthrough SQL injection limit of a little thought-vulnerability warning-the black bar safety net
Suddenly wonder if we can use what method to bypassSQL injectionlimit? Online to study a bit, and the method mentioned most of them are for AND with“'”and“=”, filter breakthrough, although a little progress, but still there are some keyword is not a bypass, because I don't ofteninvasionsite so di...
AlsaPlayer buffer overflow
Buffer overflow on oversized .ogg comment...
PT-2008-3075 · Oocomments · Oocomments
Name of the Vulnerable Software and Affected Versions: ooComments version 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for classes/class admin.php and classes/class comments.php, such as the API endpoint "/classes/class...
XSS vulnerabilities in create/edit/copy page and blogpost actions
The following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString, mode, labelsString, captchaId The following create/edit blogpost URL's are vulnerable: -...
XSS vulnerabilities in create/edit/copy page and blogpost actions
The following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString, mode, labelsString, captchaId The following create/edit blogpost URL's are vulnerable: -...
XSS vulnerabilities in create/edit/copy page and blogpost actions
The following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString, mode, labelsString, captchaId The following create/edit blogpost URL's are vulnerable: -...
CVE-2003-1546: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section...
Alkacon OpenCms tree_files.jsp resource XSS
Alkacon OpenCms treefiles.jsp resource XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the file tree navigation function. An invalid value supplied to parameter resource in page opencms/system/workplace/views/explorer/treefiles.jsp is...
Input validation
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors...
CVE-2008-0569
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors...
CVE-2008-0569
The CVE-2008-0569 entry concerns Drupal’s Comment Upload module. Affected: Comment Upload 4.7.x (before 4.7.x-0.1) and 5.x (before 5.x-0.1). Root cause: the module does not properly use functions in the upload module, allowing bypass of upload validation. Impact: remote attackers may upload arbit...