Unfixed XSS vulnerability at www.turkishdailynews.com.tr

Security researcher Narcoticxs, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.turkishdailynews.com.tr, which at the time of submission ranked 64112 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2006-7209

Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2007-2712

Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors...

CVE-2007-2712

Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors...

CVE-2007-2712

Technical details of CVE-2007-2712 are not publicly available in the provided documents; monitor for updates.

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 calendarid, 2 stylesheet, and 3 start parameters in a ViewDay.html; the 4 txtSearch and 5 opgSearch...

CVE-2006-1508

CVE-2006-1508 affects MH Software Connect Daily Web Calendar Software (version 3.2.9 and earlier). The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via various query parameters across multiple pages: calendar_id, style_s...

Connect Daily 3.2.83.2.9 - ViewCal.html?item_type_id Cross-Site Scripting

Connect Daily 3.2.83.2.9 - ViewCal.html?itemtypeid Cross-Site Scripting source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Connect Daily 3.2.8/3.2.9 - 'ViewWeek.html?week' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Connect Daily 3.2.8/3.2.9 - 'ViewYear.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Connect Daily 3.2.83.2.9 - ViewSearch.html Multiple Cross-Site Scripting Vulnerabilities

Connect Daily 3.2.83.2.9 - ViewSearch.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Connect Daily 3.2.83.2.9 - ViewWeek.html?week Cross-Site Scripting

Connect Daily 3.2.83.2.9 - ViewWeek.html?week Cross-Site Scripting source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attack...

Connect Daily 3.2.83.2.9 - ViewDay.html Multiple Cross-Site Scripting Vulnerabilities

Connect Daily 3.2.83.2.9 - ViewDay.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-suppli...

Connect Daily 3.2.8/3.2.9 - 'ViewSearch.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Connect Daily 3.2.83.2.9 - ViewYear.html Multiple Cross-Site Scripting Vulnerabilities

Connect Daily 3.2.83.2.9 - ViewYear.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Connect Daily 3.2.8/3.2.9 - 'ViewDay.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Connect Daily 3.2.8/3.2.9 - 'ViewCal.html?item_type_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17287/info Connect Daily is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Re: OpenBSD Security Advisory

Hi, Here is another exploit for an application fstat that OpenBSD's format string audit has seemingly forgotten about. What I would like to know is why this and a number of other privileged applications have security vulnerabilities in them. They WERE fixed, but NO ADVISORY nor ANY MENTION IN THE...