Directory traversal

Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to 1 read portions of arbitrary files via a .. dot dot and a ..\ dot dot backslash in the lang parameter to main/exercice/hotspotlangconversion.php and 2 read arbitrary files via a .. dot do...

CVE-2008-4706

CVE-2008-4706 affects VBGooglemap Hotspot Edition 1.0.3 (a vBulletin module). The vulnerability is a SQL injection in the mapid parameter of the showdetails action, exploitable via (1) vbgooglemaphse.php and (2) mapa.php. Remote attackers could potentially execute arbitrary SQL commands. Exploita...

Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability

No description provided by source. Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

vbgooglemap-sql.txt

Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection

Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability ==================================================================== Vbgooglemap Hotspot Edition 1.0....

Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 (2008-6439)

Tue Jul 8 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Only apply hotspot security patch of jitarches. - Wed Jul 2 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Added OpenJDK security patches. - Sat Jun 7 2008 Tom 'spot' Callaway - 1:1.6.0-0.16.b09 - enable sparc/sparc64 builds - Sat May 31 2008 Thomas...

ciscobbsm-xss.txt

Title: Cisco BBSM Captive Portal Cross-site Scripting ------------------------------------------------------------- Vendor: Cisco Systems Vendor URL: www.cisco.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

security flaw

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

security flaw

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

security flaw

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

Code injection

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

CVE-2007-0779

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

CVE-2007-0779

CVE-2007-0779 concerns a GUI overlay spoofing flaw in SeaMonkey prior to 1.0.8 (and Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2) where a large, transparent cursor via CSS3 hotspot could spoof UI elements such as the hostname or security indicators. The vulnerability allows remote observe...

FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)

The Mozilla Foundation reports of multiple security issues in Firefox, SeaMonkey, and Thunderbird. Several of these issues can probably be used to run arbitrary code with the privilege of the user running the program. - MFSA 2007-08 onUnload + document.write memory corruption - MFSA 2007-07...

security flaw

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

security flaw

GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attackers to spoof certain user interface elements, such as the host name or security indicators, via the CSS3 hotspot property with a large, transparent, custom...

Spoofing using custom cursor and CSS3 hotspot — Mozilla

David Eckel reported that browser UI elements--such as the host name and security indicators--could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area...

CVE-1999-1478

The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...