eSyndiCat Input Validation Error Vulnerability

eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...

CVE-2006-0732: Undefined Security Weakness

Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...

GLSA-200601-13 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-13 Gallery: XSS vulnerability Peter Schumacher discovered that Gallery fails to sanitize the fullname set by users, possibly leading to a cross-site scripting vulnerability. Impact : By setting a specially crafted fullname,...

CVE-2006-0330

Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...

CVE-2006-0330: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...