Kmita FAQ 1.0 - 'search.php?q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

Kmita FAQ 1.0 - index.php?catid SQL Injection

Kmita FAQ 1.0 - index.php?catid SQL Injection source: https://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to...

[SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1032-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12th, 2006 http://www.debian.org/security/faq -...

Cross site scripting

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

CVE-2006-1416 describes a cross-site scripting (XSS) vulnerability in the afmsearch.aspx page of Absolute FAQ Manager for .NET 4.0 and earlier. The issue arises from unsanitized input in the search module parameters (possibly the question parameter), enabling a remote attacker to inject arbitrary...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416: Undefined Security Weakness

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

Absolute FAQ Manager .NET XSS vuln.

Absolute FAQ Manager .NET XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: http://www.xigla.com/absolutefmnet/ affected versions: Version 4.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html Vuln. Description: Absolute FAQ Manag...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

Clone account frequently asked questions and answers-vulnerability warning-the black bar safety net

FAQ and answer: 1, The use of ca, the emergence connect... ...Error is how will things? Answer: ca and cca need to target the open ipc$, please confirm with the target to establish the ipc$is. See“About ipc$and air connections” 2, The use of ca, the emergence of“Processing.... ERROR”is how it wil...

CVE-2006-0251

CVE-2006-0251 describes a Cross-site scripting (XSS) vulnerability in Faq-O-Matic 2.711, affecting fom.cgi. The flaw allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters. The connected documents reiterate the affected product and p...

Cross site scripting

Cross-site scripting XSS vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the 1 duration, 2 file, and 3 cmd parameters...

CVE-2006-0251

Cross-site scripting XSS vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the 1 duration, 2 file, and 3 cmd parameters...

CVE-2006-0251: Undefined Security Weakness

Cross-site scripting XSS vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the 1 duration, 2 file, and 3 cmd parameters...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

CVE-2005-4064

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 faqid parameter to faqDspItem.asp and 2 catcode parameter to faqDsp.asp...

CVE-2005-4064

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 faqid parameter to faqDspItem.asp and 2 catcode parameter to faqDsp.asp...

CVE-2005-4064

CVE-2005-4064 describes multiple SQL injection vulnerabilities in A-FAQ 1.0, allowing remote attackers to execute arbitrary SQL commands through the faqDspItem.asp (faqid parameter) and faqDsp.asp (catcode parameter). Affected product: A-FAQ 1.0. Underlying cause and exact impact are documented a...