4997 matches found
SurgeMail < 4.3g XSS Vulnerability
SurgeMail is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Getsimple CMS 2.01 - changedata.php Cross-Site Scripting
Getsimple CMS 2.01 - changedata.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43593/info GetSimple CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...
Pluck CMS 4.6.3 - cont1 HTML Injection
Pluck CMS 4.6.3 - cont1 HTML Injection source: https://www.securityfocus.com/bid/43597/info Pluck is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplie...
Collaborative Passwords Manager (cPassMan) Multiple Local File Include Vulnerabilities
cPassMan is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Micro CMS 1.0 - 'name' HTML Injection (1)
source: https://www.securityfocus.com/bid/43556/info Micro CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in th...
Microsoft Excel 2002 - Memory Corruption
Microsoft Excel 2002 - Memory Corruption source: https://www.securityfocus.com/bid/43419/info Microsoft Excel is prone to a memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in...
mountall 2.15.2 (Ubuntu 10.04/10.10) - Local Privilege Escalation
source: https://www.securityfocus.com/bid/43084/info !/bin/sh by fuzz. For Anux inc. ubuntu 10.04 , 10.10 if -z "$1" then echo "usage: $0 " echo "see here http://www.reactivated.net/writingudevrules.html" exit fi cat usn985-exploit.sh usn985-sc.c /dev/.udev/rules.d/root.rules chmod +x...
Mollify 'index.php' Cross Site Scripting Vulnerability
Mollify is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary JavaScript code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...
PHP MicroCMS Local File Include and SQL Injection Vulnerabilities
PHP MicroCMS is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Axigen Webmail 1.0.1 - Directory Traversal
Axigen Webmail 1.0.1 - Directory Traversal source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information...
Axigen Webmail 1.0.1 - Directory Traversal
source: https://www.securityfocus.com/bid/43230/info Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen...
PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43213/info Mechanical Bunny Media PaysiteReviewCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...
DynPage 'dynpage_load.php' Local File Disclosure Vulnerability
DynPage is prone to a local file-disclosure vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...
Textpattern 4.2.0 (txplib_db) Null Termination Cross-Site Scripting Vulnerability
Summary Textpattern is an open source content management system unlike any other; it allows you to easily create, edit and publish content and make it beautiful in a professional, standards-compliant manner. Description Textpattern CMS version 4.2.0 suffers from a XSS vulnerability. Input passed...
CVE-2010-3257
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element focus...
CVE-2010-3257
Removed by vendor...
CVE-2010-3257
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element focus...
CVE-2010-3257
CVE-2010-3257 is a use-after-free vulnerability in WebKit/WebKitGTK+ that can allow remote code execution or a crash via element focus. It affects WebKit-based components used by Safari, Chrome, and webkitgtk prior to affected patch levels (e.g., webkitgtk before 1.2.6). The MiracleLinux AXSA adv...
HeffnerCMS 1.22 - index.php Local File Inclusion
HeffnerCMS 1.22 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/43006/info HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...
