OpenCart Cross-Site Request Forgery Vulnerability

The host is running OpenCart and is prone to cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: gbopencartcsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenCart Cross-Site Request Forgery Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks Gmb...

2DayBiz ybiz Network Community Script - SQL Injection Cross-Site Scripting

2DayBiz ybiz Network Community Script - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/40913/info 2daybiz Network Community Script is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize...

Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution

Adobe SVG Viewer 3.0 - Circle Transform Remote Code Execution source: https://www.securityfocus.com/bid/40885/info Adobe SVG Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may...

CVE-2010-2295

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

CUPS 1.4.2 - Web Interface Information Disclosure

source: https://www.securityfocus.com/bid/40897/info CUPS is prone to a remote information-disclosure vulnerability. This issue affects the CUPS web interface component. Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks. NOTE: This issue was...

MODx 1.0.3 - index.php Multiple SQL Injections

MODx 1.0.3 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...

CVE-2010-1422

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during processing of key press events, which allows remote attackers to force arbitrary key presses via a crafted HTML docume...

Hardcoded credentials

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during processing of key press events, which allows remote attackers to force arbitrary key presses via a crafted HTML docume...

CVE-2010-1422

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle changes to keyboard focus that occur during processing of key press events, which allows remote attackers to force arbitrary key presses via a crafted HTML docume...

CVE-2010-1422

Removed by vendor...

CVE-2010-1422

CVE-2010-1422 affects WebKit used by Safari on Mac OS X and Windows (pre-5.0 on certain macOS versions; before 4.1 on Mac OS X 10.4). Root cause: improper handling of keyboard focus changes during key-press processing, enabling a crafted HTML document to force arbitrary key presses. Exploitation ...

Microsoft Help and Support Center - '/sysinfo/sysinfomain.htm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40721/info Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an...

Apple Plugs 48 Security Holes in Safari Browser

Apple has shipped new versions of its Safari browser with patches for at least 48 security vulnerabilities. The Safari 4.1 and 5.0 updates, considered “highly critical,” is available for both Windows and Mac OS X. Exploitation of some of these vulnerabilities could lead to drive-by download remot...

CuteSITE CMS 1.x - '/manage/main.php?fld_path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40612/info CuteSITE CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Caucho Resin < 4.0.7 Multiple XSS Vulnerabilities - Active Check

Caucho Resin is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Home FTP Server 1.10.3 (build 144) - Cross-Site Request Forgery

Home FTP Server 1.10.3 build 144 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/40405/info Home FTP Server is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain...

Microsoft Internet Explorer 'IFRAME' DoS Vulnerability (May 2010)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenForum 2.2 b005 - 'saveAsAttachment()' Method Arbitrary File Creation

source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create arbitrary files, which may then be executed to perform unauthorized...

PostgreSQL 'RESET ALL' Unauthorized Access Vulnerability

PostgreSQL is prone to an unauthorized-access vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Resin resin-admin/digest.php XSS

The remote host is running Resin, an application server. The 'resin-admin/digest.php' script included with the version of Resin listening on the remote host fails to sanitize user input to the 'digestrealm' and/or 'digestusername' parameters before using it to generate dynamic HTML output. An...