DSA-195 apache-perl - several vulnerabilities

Bulletin has no description...

vBulletin 2.2.7/2.2.8 - HTML Injection

source: https://www.securityfocus.com/bid/6337/info Problems with vBulletin could make it possible for an attacker to inject arbitrary HTML in vBulletin forum messages. vBulletin does not sufficiently filter potentially malicious HTML code from posted messages. As a result, when a user chooses to...

vBulletin 2.2.72.2.8 - HTML Injection

vBulletin 2.2.72.2.8 - HTML Injection source: https://www.securityfocus.com/bid/6337/info Problems with vBulletin could make it possible for an attacker to inject arbitrary HTML in vBulletin forum messages. vBulletin does not sufficiently filter potentially malicious HTML code from posted message...

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting source: https://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS...

lycosxss.txt

---------------------------------------- Lycos XSS/Cookie problems Advisory ---------------------------------------- Lycos XSS/Cookie problems 05/11/02 - by "N|ghtHawk" Thijs Bosschert nighthawkathackers4hackers.org ------------------- Vendor Information: ------------------- Homepage :...

DSA-188 apache-ssl - several vulnerabilities

Bulletin has no description...

Mojo Mail 2.7 - Email Form Cross-Site Scripting

source: https://www.securityfocus.com/bid/6040/info Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser o...

Mojo Mail 2.7 - Email Form Cross-Site Scripting

Mojo Mail 2.7 - Email Form Cross-Site Scripting source: https://www.securityfocus.com/bid/6040/info Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing...

IBM Websphere Edge Server 3.69/4.0 - HTTP Header Injection

source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains...

IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/6000/info A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server. It has been reported that the Caching Proxy is vulnerable to cross site scripting attacks. Due to insufficient sanitization of...

IBM Websphere Edge Server 3.694.0 - HTTP Header Injection

IBM Websphere Edge Server 3.694.0 - HTTP Header Injection source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for a...

Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass

source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Internet Explorer 5 with Service Pack 2 a...

Microsoft Internet Explorer 56 - Cached Objects Zone Bypass

Microsoft Internet Explorer 56 - Cached Objects Zone Bypass source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with...

KMMail 1.0 - E-Mail HTML Injection

KMMail 1.0 - E-Mail HTML Injection source: https://www.securityfocus.com/bid/6013/info kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script cod...

New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums

Two security vulnerabilities in YaBB allows stealing users cookies and hijacking users accounts. Tested on: YaBB 1.40 & 1.41 Summary : YaBB is a leading provider of free, downloadable php forums for webmasters. Two security vulnerabilities in the product allows a remote attacker to steal users...

vBulletin 2.0/2.2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5997/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser o...

YaBB 1.40/1.41 - Login Cross-Site Scripting

source: https://www.securityfocus.com/bid/6004/info A cross-site scripting vulnerability has been reported in the YaBB Yet Another Bulletin Board forum login script. HTML tags or script code are not sanitized from the error output of erroneous login attempts. As a result, it is possible for a...

vBulletin 2.02.2.x - Cross-Site Scripting

vBulletin 2.02.2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/5997/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script co...

YaBB 1.401.41 - Login Cross-Site Scripting

YaBB 1.401.41 - Login Cross-Site Scripting source: https://www.securityfocus.com/bid/6004/info A cross-site scripting vulnerability has been reported in the YaBB Yet Another Bulletin Board forum login script. HTML tags or script code are not sanitized from the error output of erroneous login...

Multiple XSS vulnerabilites in PHPNuke

Multiple XSS Vulnerabilities in PHPNuke 6.0 ------------------------------------------- Summary: We have found 7 diferent cross-site-scripting vulnerabilities in PHPNuke 6.0 which allow for anyone to steal the authentication cookies from users and Administrators. Some of them include several ways...