Unfixed XSS vulnerability at www.unitedkingdom.co.uk

Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.unitedkingdom.co.uk, which at the time of submission ranked 656799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...

Unfixed XSS vulnerability at www.zwmster.com

Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.zwmster.com, which at the time of submission ranked 2630481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is currently...

Unfixed XSS vulnerability at www.kingsway.stockport.sch.uk

Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.kingsway.stockport.sch.uk, which at the time of submission ranked 973965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It...

USN-412-1: GeoIP vulnerability

Dean Gaudet discovered that the GeoIP update tool did not validate the filename responses from the update server. A malicious server, or machine-in-the-middle system posing as a server, could write to arbitrary files with user privileges...

[ MDKSA-2007:004 ] - Updated geoip packages fix geoipupdate vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:004 http://www.mandriva.com/security/ Package : geoip Date : January 8, 2007 Affected: Corporate 4.0 Problem Description: Dean Gaudet discovered the geoipupdate utility fails to do sanity checking on the...