MaxWebPortal < 1.360 Multiple Vulnerabilities

Binary data 2898.prm...

mozilla -- privilege escalation via non-DOM property overrides

A Mozilla Foundation Security Advisory reports: Additional checks were added to make sure Javascript eval and Script objects are run with the privileges of the context that created them, not the potentially elevated privilege of the context calling them in order to protect against an additional...

CVE-2005-1329

owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter...

Claroline E-Learning 1.51.6 - userInfo.php Multiple SQL Injections

Claroline E-Learning 1.51.6 - userInfo.php Multiple SQL Injections source: https://www.securityfocus.com/bid/13407/info Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied...

Claroline 1.51.6 - myagenda.php?coursePath Cross-Site Scripting

Claroline 1.51.6 - myagenda.php?coursePath Cross-Site Scripting source: https://www.securityfocus.com/bid/13407/info Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied...

Claroline 1.51.6 - toolaccess_details.php?tool Cross-Site Scripting

Claroline 1.51.6 - toolaccessdetails.php?tool Cross-Site Scripting source: https://www.securityfocus.com/bid/13407/info Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied...

Claroline E-Learning 1.5/1.6 - 'userInfo.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13407/info Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical application...

Claroline E-Learning 1.5/1.6 - 'exercises_details.php?exo_id' SQL Injection

source: https://www.securityfocus.com/bid/13407/info Multiple remote input validation vulnerabilities affect Claroline e-Learning Application. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical application...

MetaCart2 - strSubCatalog_NAME SQL Injection

MetaCart2 - strSubCatalogNAME SQL Injection source: https://www.securityfocus.com/bid/13385/info A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may...

MetaBid Auctions - intAuctionID SQL Injection

MetaBid Auctions - intAuctionID SQL Injection source: https://www.securityfocus.com/bid/13395/info A remote SQL injection vulnerability affects MetaBid Auctions. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...

MetaCart E-Shop V-8 - IntProdID SQL Injection

MetaCart E-Shop V-8 - IntProdID SQL Injection source: https://www.securityfocus.com/bid/13376/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attack...

MetaCart E-Shop V-8 - StrCatalog_NAME SQL Injection

MetaCart E-Shop V-8 - StrCatalogNAME SQL Injection source: https://www.securityfocus.com/bid/13377/info An SQL injection vulnerability affects MetaCart e-Shop V-8. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...

MetaCart2 - 'IntCatalogID' SQL Injection

source: https://www.securityfocus.com/bid/13382/info A remote SQL-injection vulnerability affects MetaCart2 because the application fails to properly sanitize user-supplied input before including it in SQL queries. An attacker may exploit this issue to manipulate SQL queries to the underlying...

MetaCart2 - 'strSubCatalog_NAME' SQL Injection

source: https://www.securityfocus.com/bid/13385/info A remote SQL injection vulnerability affects MetaCart2. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL querie...

MetaBid Auctions - 'intAuctionID' SQL Injection

source: https://www.securityfocus.com/bid/13395/info A remote SQL injection vulnerability affects MetaBid Auctions. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL...

Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities

Background The Mozilla Suite is a popular all-in-one web browser that includes a mail and news reader. Mozilla Firefox is the next-generation browser from the Mozilla project. Description The following vulnerabilities were found and fixed in the Mozilla Suite and Mozilla Firefox: Vladimir V...

GLSA-200504-18 : Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-18 Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities The following vulnerabilities were found and fixed in the Mozilla Suite and Mozilla Firefox: Vladimir V. Perepelitsa reported a memory disclosure bug in JavaScript...

phpBB Remote - mod.php SQL Injection

phpBB Remote - mod.php SQL Injection source: https://www.securityfocus.com/bid/13209/info A remote SQL injection vulnerability affects the datenbank module for phpbb. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. A...

mozilla -- privilege escalation via DOM property overrides

A Mozilla Foundation Security Advisory reports: mozbugra4 reported several exploits giving an attacker the ability to install malicious code or steal data, requiring only that the user do commonplace actions like click on a link or open the context menu. The common cause in each case was privileg...

Privilege escalation via DOM property overrides — Mozilla

mozbugra4 reported several exploits giving an attacker the ability to install malicious code or steal data, requiring only that the user do commonplace actions like click on a link or open the context menu. The common cause in each case was privileged UI code "chrome" being overly trusting of DOM...