Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions

Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting thes...

webSPELL 4.1.2 - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26787/info webSPELL is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

E-Xoops 1.0.5/1.0.8 - '/modules/arcade/index.php?gid' SQL Injection

source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

E-Xoops 1.0.5/1.0.8 - '/mysections/ratefile.php?lid' SQL Injection

source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Easy File Sharing Web Server 1.3x4.5 - Directory Traversal Multiple Information Disclosure Vulnerabilities

Easy File Sharing Web Server 1.3x4.5 - Directory Traversal Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/26771/info Easy File Sharing Web Server is prone to a directory-traversal and multiple information-disclosure vulnerabilities. Successfully exploiti...

Joomla! Component Content 1.5 RC3 - view SQL Injection

Joomla! Component Content 1.5 RC3 - view SQL Injection source: https://www.securityfocus.com/bid/26707/info Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow ...

phpMyChat 0.14.5 - chatusers_popupL.php3 Multiple Cross-Site Scripting Vulnerabilities

phpMyChat 0.14.5 - chatuserspopupL.php3 Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26698/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Apple Safari 1.x3.0.x Firefox 1.5.0.x2.0.x - JavaScript Multiple Fields Key Filterings

Apple Safari 1.x3.0.x Firefox 1.5.0.x2.0.x - JavaScript Multiple Fields Key Filterings source: https://www.securityfocus.com/bid/26669/info Multiple web browsers are prone to a JavaScript key-filtering vulnerability because the browsers fail to securely handle keystroke input from users. Exploiti...

Ossigeno CMS 2.2_pre1 - uploadxaxossigenoadminuninstall_module.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxossigenoadminuninstallmodule.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Tilde 4.0 - Aarstal Cross-Site Scripting

Tilde 4.0 - Aarstal Cross-Site Scripting source: https://www.securityfocus.com/bid/26592/info Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

SimpleGallery 0.1.3 - index.php Cross-Site Scripting

SimpleGallery 0.1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26585/info SimpleGallery is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML o...

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities

Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/26604/info Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the...

VMware Tools 3.1 - 'HGFS.Sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/26556/info VMware Tools is prone to a privilege-escalation vulnerability. The application fails to properly drop privileges before performing certain functions. An attacker can exploit this in the guest opertaing system to elevate privileges in the hos...

VUNET Case Manager 3.4 - default.asp SQL Injection

VUNET Case Manager 3.4 - default.asp SQL Injection source: https://www.securityfocus.com/bid/26523/info VUNET Case Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Underground CMS 1.x - Search.Cache.Inc.php Backdoor Access

Underground CMS 1.x - Search.Cache.Inc.php Backdoor Access Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; Ucms v. 1.8 Np exploit Actual Request: Host: Password: Phpcode: phpinfo; ? !-- It�s...

JiRos Banner System 2.0 - login.asp Multiple SQL Injections

JiRos Banner System 2.0 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

CVE-2007-4693

The SecurityAgent component in Mac OS X 10.4 through 10.4.10 allows attackers with physical access to bypass the authentication dialog of the screen saver and send keystrokes to a process, related to "handling of keyboard focus between secure text fields."...

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit these issues to cause denial...

Rapid Classified - AgencyCatResult.asp SQL Injection

Rapid Classified - AgencyCatResult.asp SQL Injection source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...