648 matches found
bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting
--==+================================================================================+==-- --==+ BUG MALL SHOPPING CART 2.5 AND PRIOR SQL, XSS, DEFAULT LOGINS VULNERABILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
Apache Tomcat snoop.jsp URI XSS
The remote Apache Tomcat web server includes an example JSP application, 'snoop.jsp', that fails to sanitize user-supplied input before using it to generate dynamic content. An unauthenticated, remote attacker can exploit this issue to inject arbitrary HTML or script code into a user's browser to...
CVE-2007-2449.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-2449: Apache Tomcat XSS vulnerabilities in the JSP examples Severity: low cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.2...
[Full-disclosure] [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-2449: Apache Tomcat XSS vulnerabilities in the JSP examples Severity: low cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.2...
CentOS 5 : tomcat (CESA-2007:0327)
Updated tomcat packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. Tomca...
jakarta, tomcat5 security update
CentOS Errata and Security Advisory CESA-2007:0327 Updated tomcat packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Ja...
CVE-2007-2614
CVE-2007-2614 describes a PHP remote file inclusion vulnerability in the file examples/widget8.php of phpHtmlLib 2.4.0 and earlier . The flaw allows an attacker to cause remote PHP code execution by supplying a URL in the phphtmllib parameter. Affected component is the widget8 example within phpH...
CVE-2007-2614
PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter...
CVE-2007-2614: Undefined Security Weakness
PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter...
PT-2007-1472 · Apache +1 · Apache Tomcat +1
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.0.0 through 5.0.30 Apache Tomcat versions 5.5.0 through 5.5.17 Description: A cross-site scripting XSS issue exists due to unfiltered header values in the implicit-objects.jsp file of the examples webapp, allowing...
Fixed in Apache Tomcat 5.5.18, 5.0.SVN
Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...
CVE-2007-2285: Undefined Security Weakness
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...
Angel Lms 7.1 - default.asp?id SQL Injection
Angel Lms 7.1 - default.asp?id SQL Injection Application: Angel Learning Management Suite 7.1 http://www.angellearning.com Description: "ANGEL LMS is an inclusive suite of enterprise learning management tools that balances ease of use with powerful capabilities to deliver leading edge teaching an...
Angel Lms 7.1 - 'default.asp?id' SQL Injection
Application: Angel Learning Management Suite 7.1 http://www.angellearning.com Description: "ANGEL LMS is an inclusive suite of enterprise learning management tools that balances ease of use with powerful capabilities to deliver leading edge teaching and learning, impact learner success and measur...
Angel LMS 7.1 (default.asp id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Angel LMS 7.1 default.asp id Remote SQL Injection Vulnerability ================================================================= Application: Angel Learning Management Suit...
CVE-2007-0837: Undefined Security Weakness
PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...
phpicalendar-xss.txt
PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...
TinyWebGallery <= 1.5 (image) Remote Include Vulnerabilities
No description provided by source. C Y B E R - W A R R i O R T I M TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------...
wisi-sql.txt
By: Jesus Tovar mail: [email protected] Greetz: Dario Struz Vendor: http://www.wsicorporate.com Digital Security Owner Dork: "Created and maintained by WSI" File Bug: /login.asp /admin/login.asp /admin/request.asp Sql Injection : ' or 'x'='x Site Examples: http://host.com/admin/login.asp...
Wisi Portal [Sql Injection By Jesus Tovar]
By: Jesus Tovar mail: [email protected] Greetz: Dario Struz Vendor: http://www.wsicorporate.com Digital Security Owner Dork: "Created and maintained by WSI" File Bug: /login.asp /admin/login.asp /admin/request.asp Sql Injection : ' or 'x'='x Site Examples: http://host.com/admin/login.asp...