Online Contact Manager 3.0 - view.php?id Cross-Site Scripting

Online Contact Manager 3.0 - view.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues t...

Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Online Contact Manager 3.0 - index.php?showGroup Cross-Site Scripting

Online Contact Manager 3.0 - index.php?showGroup Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Malleo 1.2.3 - admin.php Local File Inclusion

Malleo 1.2.3 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/34588/info Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files ...

Atmail WebMail Email Body HTML Injection Vulnerability

Atmail and Atmail WebMail are prone to an HTML-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...

FTPDMIN 'RNFR' Command Buffer Overflow Vulnerability

According to its version number, the remote version of Ftpdmin is prone to a buffer-overflow vulnerability. A successful exploit may allow attackers to execute arbitrary code in the context of the vulnerable service. Failed exploit attempts will likely cause denial-of-service conditions...

Horde Turba HTML Injection Vulnerability (Apr 2009)

Horde Turba is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Horde 3.2 < 3.2.3, 3.3 < 3.3.1 XSS Vulnerability

Horde is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IBM Bladecenter Advanced Management Module 1.42 - privatefile_Management.ssi?PATH Cross-Site Scripting

IBM Bladecenter Advanced Management Module 1.42 - privatefileManagement.ssi?PATH Cross-Site Scripting source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site...

Cisco Subscriber Edge Services Manager - Cross-Site Scripting HTML Injection

Cisco Subscriber Edge Services Manager - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/34454/info Cisco Subscriber Edge Services Manager is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize...

IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...

ZENworks Remote Management Agent Detection

The remote host is running ZENworks Remote Management Agent. This program allows a system to be managed remotely by an administrator. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid36088; scriptversion"1.10";...

phpMyAdmin Code Injection and XSS Vulnerability

phpMyAdmin is prone to a remote PHP code-injection vulnerability and to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Pixie CMS SQL Injection and Cross Site Scripting Vulnerabilities

Pixie CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modif...

Gretech GOM Encoder 1.0.0.11 (Subtitle File) Buffer Overflow PoC

No description provided by source. exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...

Yap Blog 'index.php' Remote File Include Vulnerability

Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. Versions prior to Yap Blog 1.1.1 are...

WEBJump! Multiple SQLi Vulnerabilities (Mar 2009) - Active Check

WEBJump! is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Bugs Online <= 2.14 SQLi Vulnerability - Active Check

Bugs Online is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Yap Blog < 1.1.1 RFI Vulnerability - Active Check

Yap Blog is prone to a remote file inclusion RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...