Debian Security Advisory DSA 195-1 (apache-perl)

The remote host is missing an update to apache-perl announced via advisory DSA 195-1. OpenVAS Vulnerability Test $Id: deb1951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 195-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

F5 BIG-IP 9.4.3 - 'SearchString' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27272/info F5 BIG-IP is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities

Sun Java System Identity Manager 6.07.07.1 - idmlogin.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27214/info Sun Java System Identity Manager is prone to multiple input-validation vulnerabilities, including an HTML-injection issue and cross-site...

PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26891/info Flyspray is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

evanced-sqlxss.txt

E-vanced Solutions Multiple Vulnerabilites http://www.e-vancedsolutions.com First off, script code can be injected into all fields when you register for some event. This presents a possibility for cookie theft from logged in users. Next off, theres there exists an SQL injection point from the...

Bitweaver 1.x2.0 - searchindex.php?highlight SQL Injection

Bitweaver 1.x2.0 - searchindex.php?highlight SQL Injection source: https://www.securityfocus.com/bid/26801/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting...

Saxon 5.4 - Menu.php Cross-Site Scripting

Saxon 5.4 - Menu.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26237/info Saxon is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2002-2314

CVE-2002-2314 affects Mozilla 1.0. Remote attackers could steal cookies from other domains using a crafted javascript: URL that begins with // and ends in a newline, causing a host/path check to fail. The issue is addressed in Mozilla security fixes for 1.0.1; advisories also reference updates to...

Simple PHP Blog多个安全漏洞

Simple PHP Blog是一款基于PHP的网络日记程序。 Simple PHP Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞对应用程序进行各种攻击。 问题包括如下： -IP伪造 -HTML注入 -会话固定 -开放EMAIL RELAY -本地文件包含 -跨站请求伪造 -任意文件上传。 攻击者利用这些问题可破坏受影响的应用程序，以WEB服务进程权限执行任意代码。发送任意恶意邮件，或窃取COOKIE等信息。 Simple PHP Blog Simple PHP Blog 0.5.1 Simple PHP Blog Simple PHP Blog 0.4.8 Simpl...

orkutfun-xss.txt

Greetings! Doing hard searches and working hard seeking for xss holes we finally found! The new hole is in the description of the pic, you can put html encode chars like this. & l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ; means more or close tag. So you can build...

Unfixed XSS vulnerability at www.letu.edu

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.letu.edu, which at the time of submission ranked 94173 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currentl...

Unfixed XSS vulnerability at bahamas.globat.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting bahamas.globat.com, which at the time of submission ranked 6467 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Vikingboard 0.1.2 - topic.php Cross-Site Scripting

Vikingboard 0.1.2 - topic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Vikingboard 0.1.2 - 'post.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

Insanely Simple Blog 0.4/0.5 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/24934/info Insanely Simple Blog is prone to multiple input-validation vulnerabilities, including cross-site scripting, HTML-injection, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Exploiting these issue...

Insanely Simple Blog 0.40.5 - index.php SQL Injection

Insanely Simple Blog 0.40.5 - index.php SQL Injection source: https://www.securityfocus.com/bid/24934/info Insanely Simple Blog is prone to multiple input-validation vulnerabilities, including cross-site scripting, HTML-injection, and SQL-injection issues, because the application fails to properl...

TBDev.NET DR - TakeProfEdit.php HTML Injection

TBDev.NET DR - TakeProfEdit.php HTML Injection source: https://www.securityfocus.com/bid/24923/info TBDev.NET DR is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script...

New post Topic Hijacking XSS All vBulletin v 3.x.x (2)

+-------------------------------------------------------------------- + + New post Topic Hijacking XSS All vBulletin® v 3.x.x + +-------------------------------------------------------------------- + vendor site........: http://www.vbulletin.com/ + Affected Software .: vbulletin + Class...

New Include Redirect Bug XSS All vBulletin v 3.x.x

+-------------------------------------------------------------------- + + New Include Redirect Bug XSS All vBulletin® v 3.x.x + +-------------------------------------------------------------------- + vendor site........: http://www.vbulletin.com/ + Affected Software .: vbulletin + Class...