SonicWALL Content Filtering Blocked Site Error Page Cross-Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4918

SonicWALL SonicOS Enhanced (pre-4.0.1.1) on SonicWALL Pro 2040 and TZ 180/190 is affected by an XSS vulnerability in the Content Filtering (CFS) block page. A crafted URL to a blocked site can cause arbitrary web script or HTML to be injected into the target’s browser, enabling universal website ...

CVE-2008-4918

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI...

SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/31998/info SonicWALL Content Filtering is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in a blocked-site error page. An attacker may leverage this iss...

CVE-2008-3487

PHPAuction GPL Enhanced 2.51 is affected by a SQL injection in profile.php via the id parameter, allowing remote execution of arbitrary SQL commands. The root cause is input unsanitized in the id parameter; CVSSv2 base score 7.5 (HIGH) reflects network access, low attack complexity, no authentica...

PHPAuction GPL Enhanced 2.51 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPAuction GPL Enhanced 2.51 profile.php SQL Injection Vulnerability ====================================================================== || | | PHPAuction GPL Enhanc...

PHPAuction GPL Enhanced 2.51 (profile.php) SQL Injection Vulnerability

No description provided by source. || | | PHPAuction GPL Enhanced V2.51 profile.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

phpAuction GPL Enhanced 2.51 - profile.php SQL Injection

phpAuction GPL Enhanced 2.51 - profile.php SQL Injection || | | PHPAuction GPL Enhanced V2.51 profile.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | ...

phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection

|| | | PHPAuction GPL Enhanced V2.51 profile.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://phpauctions.info/ | | DorK : /: ||...

[SECURITY] Fedora 8 Update: horde-3.2.1-1.fc8

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

MS Windows Metafile (.emf) Heap Overflow Exploit (MS04-032)

No description provided by source. / HOD-ms04032-emf-expl2.c: MS04-032 Microsoft Windows XP Metafile .emf Heap Overflow Exploit version 0.2 PUBLIC coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- About WMF/EMF: Windows Metafile WMF...

[SECURITY] Fedora 7 Update: horde-3.1.6-1.fc7

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

CVE-2004-2712

Gyach Enhanced (Gyach-E) prior to version 1.0.0-SneakPeek-3 is affected by a buffer overflow vulnerability that could be triggered by URL data, allowing remote attackers to cause a denial of service (crash). The description specifies an unspecified vector but identifies the affected product and v...

CVE-2004-2708

Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext in its configuration file, enabling an attacker with access to the file to obtain user passwords. This vulnerability is associated with CVE-2004-2708 and is corroborated by multiple sources in the connected documents (Red Hat, CV...

CVE-2004-2711

CVE-2004-2711 affects Gyach Enhanced (Gyach-E) prior to 1.0.2. The issue is described as multiple buffer overflows in avatar retrieval logic that can allow a remote attacker to crash the application or potentially execute arbitrary code. The connected sources confirm the affected product/version ...

CVE-2004-2710

CVE-2004-2710 affects Gyach Enhanced (Gyach-E) prior to 1.0.3. Multiple buffer overflows allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via two vectors: (1) sending certain typing statuses, and (2) setting the chat room status bar to the current c...

CVE-2004-2706

Unspecified vulnerability in Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service crash via conference packets with error messages...

CVE-2004-2709

The vulnerability CVE-2004-2709 affects Gyach Enhanced (Gyach-E) before 1.0.4, where a buffer overflow in the strip_html_tags method can be triggered remotely via HTML tags, potentially causing a denial of service or arbitrary code execution. Exploitation vectors are not detailed in the provided ...