316 matches found
CVE-2006-0073
CVE-2006-0073 is an XSS vulnerability reported for DiscusWare Discus Freeware 3.10.5 and Discus Freeware Professional 3.10.4. The issue arises because the application does not properly sanitize unsanitized data in the URL before including it in an error message, enabling remote attackers to injec...
[SA18283] Discus Error Message Cross-Site Scripting Vulnerability
TITLE: Discus Error Message Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18283 VERIFY ADVISORY: http://secunia.com/advisories/18283/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Discus Freeware 3.x http://secunia.com/product/6725/ Discus...
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/16119/info DiscusWare Discus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...
fipsCMS light - vulnerable to script injection.
fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like scriptalert‘code executed’/script, this will automaticly launch when a users visits that site. Please credit to:...
fipsCMS.txt
fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like alertcode executed, this will automaticly launch when a users visits that site. Please credit to: Preben Nyløkken...
Solaris 9 (sparc) : 116340-09
SunOS 5.9: gzip and Freeware info files patch. Date this patch was last updated by Sun : May/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2]
================================================================================ waraxe-2004-SA017 ================================================================================ User-level authentication bypass in phpnuke 6.x-7.2...
Netsuite121.txt
Moby's Netsuite 1.21 Traversal Directory bugs Release Date: 13 July, 2003 Description: NetSuite is a freeware server suite that allows anyone with a static IP address the ability to run their own mail and web services. Note that you cannot reasonably run a web server from a normal dial-in account...
CVE-2002-0685
CVE-2002-0685 describes a heap-based buffer overflow in the message decoding function of the PGP Outlook Plug-in used by NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3. A remote attacker could trigger this via a large, malformed email message to modify the heap and ga...
CVE-2001-1016
The CVE-2001-1016 entry affects PGP Corporate Desktop < 7.1 , Personal Security < 7.0.3 , Freeware < 7.0.3 , and E-Business Server
Savant Webserver Buffer Overflow Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Savant Webserver Buffer Overflow Vulnerability Type: DoS, crashes Daemon Release Date: January 5, 2002 Product / Vendor: Savant is a freeware open source web server that runs on Windows 95, 98, ME, NT, and 2000, turning any desktop computer into a...
Aspseek Buffer Overflow
|---------------------------------------------------------------------------------------| / Product: Aspseek Search Engine. Vendor URL: www.aspseek.org / Tested on: v1.0.0 - v1.0.3 Freeware Linux Vendor Contact: Mailed on 8th March NO Reply Vendor Patched though / |-- The Problem,...
A1 Server v1.0a HTTPd (DoS & Dir Traversal)
Introduction: A1 Server v1.0a is a HTTPd server for the Windows OS, and it will deliver the following content: GIF impages, HTM or HTML pages, EXE files, and ZIP files. The server is very small, but yet somewhat stable and is freeware! Yeah. right The Vendors website is:...
RedHat Linux 7.0 - Roaring Penguin PPPoE Denial of Service
RedHat Linux 7.0 - Roaring Penguin PPPoE Denial of Service source: https://www.securityfocus.com/bid/2098/info Roaring Penguin Software's PPPoE is a freeware PPP over Ethernet client often used by ADSL subscribers running Linux or NetBSD. PPPoE contains a possibly remotely exploitable denial of...
Two security flaws in Bajie Webserver
More junk brought to you by the MDMA Crew www.mdma.za.net Two security flaws in the Bajie Webserver Bajie is a freeware HTTP daemon written in Java and available from TuCows. We found two vulnerabilities in it... The sample Java servlet at /servlet/test/pathInfo/test gives away a real path eg...
promail.1.21.trojan.txt
Date: Fri, 19 Mar 1999 09:41:18 +0100 From: Aeon Labs To: [email protected] Subject: security/privacy news Perhaps this might be of interest to Your readers. ProMail v1.21, an advanced freeware mail program spread through several worldwide distribution networks SimTel.net, Shareware.co...