CVE-2005-4574: Undefined Security Weakness

Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...

CVE-2005-4575: Undefined Security Weakness

PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...

CommonSpot Content Server vuln.

CommonSpot Content Server vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/commonspot-content-server-vuln.html vendor:http://www.paperthin.com/ affected version:4.5 and prior Product Description: PaperThin's award-winning technology enables o...

CommonSpot Content Server vuln.

CommonSpot Content Server vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/commonspot-content-server-vuln.html vendor:http://www.paperthin.com/ affected version:4.5 and prior Product Description: PaperThin's award-winning technology enables o...

PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting

PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/16071/info PaperThin CommonSpot Content Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Mambo Content Server Detection Global Variables Overwrite

Binary data 2638.prm...

Mambo Content Server < 4.5.1b Detection Global Variables Overwrite

Binary data 2589.prm...

Divine OpenMarket Content Server XSS

Content Server is a web content management from Divine www.divine.com A Cross Site Scripting in this product allows injection of hostile HTML/script into the error page. Example : http://www.mouffleton.com/servlet/ContentServer?pagename=body20onload=alertdocument.cookie; Workaround : Catch error...

Divine Content Server 5.0 - Error Page Cross-Site Scripting

Divine Content Server 5.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8763/info It has been reported that Divine Content Server is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the...

Divine Content Server 5.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/8763/info It has been reported that Divine Content Server is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the 'pagename' attribute in the error page of the software. This issu...

CVE-2002-1020

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available...

CVE-2002-1018

The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service resource exhaustion by checking out the same book multiple times...

CVE-2002-1019

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp...

CVE-2002-1018

The CVE-2002-1018 entry concerns the library feature of Adobe Content Server 3.0, which does not verify whether a customer has already checked out an eBook. This allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly checking out the same book. The connected docu...

CVE-2002-1019

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp...

CVE-2002-1018

The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service resource exhaustion by checking out the same book multiple times...

CVE-2002-1020

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available...

CVE-2002-1019

CVE-2002-1019 affects the Adobe Content Server 3.0 library feature. The vulnerability arises in a downloadable eBook workflow where a remote attacker can manipulate the loanMin parameter in download.asp to extend the loan period for an arbitrary length of time. The available documentation explici...

CVE-2002-1020

The CVE-2002-1020 entry concerns Adobe Content Server 3.0. The vulnerability arises in the library feature used for the Add to bookbag operation: when the server reports that no more copies are available, a remote attacker can still check out an eBook. This implies an underlying logic flaw where ...

CVE-2002-1019: Undefined Security Weakness

The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp...