Unfixed XSS vulnerability at ng.pic.to

Security researcher kusomiso.com, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting ng.pic.to, which at the time of submission ranked 21476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currently...

Unfixed XSS vulnerability at www.porndiner.com

Security researcher Yachi, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting www.porndiner.com, which at the time of submission ranked 8770744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Unfixed XSS vulnerability at medefisdemo.com

Security researcher BackDoor, has submitted on 06/09/2007 a cross-site-scripting XSS vulnerability affecting medefisdemo.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently...

Unfixed XSS vulnerability at www.inspirationpeak.com

Security researcher BackDoor, has submitted on 06/09/2007 a cross-site-scripting XSS vulnerability affecting www.inspirationpeak.com, which at the time of submission ranked 181209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2007. It i...

comicsense-sql.txt

Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...

CVE-2001-1581

The CVE-2001-1581 affects Clearswift MAILsweeper for SMTP 4.2, where the File Blocker feature can be bypassed by attackers manipulating a Content-Type header filename, enabling bypass of attachment filtering policies. Impact per CVSS2: Network attack, low complexity, no authentication required, w...

CVE-2003-1330

Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.

CVE-2001-1581

The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header...

Unfixed XSS vulnerability at www.learningtechnologies.ac.uk

Security researcher Hotpockets, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting www.learningtechnologies.ac.uk, which at the time of submission ranked 1180989 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Cisco CallManager Web Interface Input Validation Bypass Vulnerability

Cisco CallManager versions 4.31 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to bypass security restrictions and conduct cross-site scripting attacks. This vulnerability exists due to insufficient sanitization of user-supplied input to the CallManager web...

Unfixed XSS vulnerability at www.ukleader.org.uk

Security researcher Hotpockets, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting www.ukleader.org.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

jetbox-inject.txt

netVigilance Security Advisory 26 Jetbox CMS version 2.1 E-Mail Injection Vulnerability Description: Jetbox content management system is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully...

Jetbox CMS version 2.1 E-Mail Injection Vulnerability

netVigilance Security Advisory 26 Jetbox CMS version 2.1 E-Mail Injection Vulnerability Description: Jetbox content management system is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully...

Crlf injection

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF %0A sequences in the subject parameter, a related issue to CVE-2007-1898...

CVE-2007-2731

Jetbox CMS 2.1 is affected by a CRLF injection in formmail.php, allowing remote attackers to inject arbitrary e-mail headers via LF sequences in the subject parameter. This is linked to CVE-2007-1898. The NetVigilance advisory notes that exploitation requires PHP register_globals to be On; a work...

CVE-2007-2731: Undefined Security Weakness

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF %0A sequences in the subject parameter, a related issue to CVE-2007-1898...

Stalker CommuniGate Pro crossite scripting

Crossite scripting via e-mail within Internet Explorer...

CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...

CVE-2007-1262

Multiple cross-site scripting XSS vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the 1 data: URI in an HTML e-mail attachment or 2 various non-ASCII character sets that are not properly filtered when viewed...