CVE-2006-2358

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2358

CVE-2006-2358 describes multiple cross-site scripting (XSS) vulnerabilities in Web-Labs CMS. The flaws allow remote attackers to inject arbitrary web script or HTML through (1) the search parameter and (2) unspecified fields related to e-mail alerts. Affected software is Web-Labs CMS; the root ca...

CVE-2006-2358

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2358: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-1450

The CVE-2006-1450 flaw affects Apple Mail on Mac OS X 10.3.9 and 10.4.6. A remote attacker can send an enriched text e‑mail with invalid color information that causes Mail to allocate and initialize arbitrary classes, enabling arbitrary code execution. The vulnerability is described as a remote c...

Sql injection

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2333

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2333

CVE-2006-2333 concerns MyBB 1.1.1 where multiple SQL injection flaws allow remote attackers to run arbitrary SQL through the email address during registration for a mail-verified forum, due to improper handling in (1) usercp.php and (2) member.php. The vulnerability permits injected SQL commands ...

CVE-2006-1450: Undefined Security Weakness

Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with "invalid color information" that causes Mail to allocate and initialize arbitrary classes...

CVE-2006-0027: Undefined Security Weakness

Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted 1 vCal or 2 iCal Calendar properties...

CuteGuestbook XSS attack

Hi, I found a bug in CuteGuestbook, you can see the original advisory here: http://colander.altervista.org/advisory/CuteGuestbook.txt I tested this application on my box and it is vulnerable. Please let me know if you wanna to post it up or not! Best Regards, Omni -- Email.it, the professional...

Tьmer Bilişim File İnclusion

Tumer Biliim File nclusion Site:www.sirmanet.com Demo:http://www.kumburgaztml.k12.tr/ Demo2:http://www.dosteliyardim.org/ --------------------------------- File nclusion 1 ifisset$sayfa && $sayfa != "" $x = @include $sayfa; sayfa parameter File inclusion File nclusion 2 ifisset$link && $link != "...

CVE-2006-1697

Cross-site scripting XSS vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the 1 Your Name, 2 E-Mail, or 3 Comments fields when posting a message...

CVE-2006-1697

Cross-site scripting XSS vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the 1 Your Name, 2 E-Mail, or 3 Comments fields when posting a message...

CVE-2006-1697: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the 1 Your Name, 2 E-Mail, or 3 Comments fields when posting a message...

Virtual War File İnclusion

Virtual War File nclusion --------------------------------- Site:http://www.vwar.de/ Demo:http://www.vwar.de/demo/ --------------------------------------- File nclusion // get functions $vwarroot = "./"; require $vwarroot . "includes/functionscommon.php"; require $vwarroot...

Microsoft Internet Explorer - 'createTextRang' Download Shellcode (2)

/ Internet Explorer "createTextRang" Download Shellcoded Exploit 2 Bug discovered by Computer Terrorism UK http://www.computerterrorism.com/research/ct22-03-2006 Affected Software: Microsoft Internet Explorer 6.x & 7 Beta 2 Severity: Critical Impact: Remote System Access Solution Status: Unpatche...

XSS vulnerability in Dada Mail

The remote host is running Dada Mail, a free, e-mail list management system written in Perl. According to its banner, the remote version of this software does not properly validate user written content before submitting that data to the archiving system. A malicious user could embed arbitrary...

CVE-2006-1225

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...

Buffer overflow

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...