2961 matches found
Cacti <= 0.8.7 tree.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/27749/info Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting...
Serendipity 0.x Exit.PHP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11497/info Serendipity is reported prone to an HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This...
SAP Web Application Server 6.x/7.0 Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied...
webcalendar 0.9.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11651/info Multiple remote vulnerabilities are reported to exist in WebCalendar. Multiple cross-site scripting vulnerabilites, an HTTP response splitting vulnerability, and two authentication bypass vulnerabilities are...
Just William's Amazon Webstore HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13428/info Amazon Webstore is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability ...
ExpressionEngine 1.2.1 HTTP Response Splitting and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27128/info ExpressionEngine is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
osCommerce 2.1/2.2 - Multiple HTTP Response Splitting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13979/info osCommerce is prone to multiple HTTP response splitting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit any of these...
Oracle Sun Java System Web Server - HTTP Response Splitting
No description provided by source...
OXID eShop < 4.7.11/5.0.11 + < 4.8.4/5.1.4 - Multiple Vulnerabilities
No description provided by source. Exploit Title: OXID eShop v4.7.11/5.0.11 + v4.8.4/5.1.4 Multiple Vulnerabilities Google Dork: - Date: 12/2013 Exploit Author: //sToRm Author mail: [email protected] Vendor Homepage: http://www.oxid-esales.com Software Link: - Version: All versions...
promise webpam 2.2.0.13 - Multiple Vulnerabilities
No description provided by source. Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities Vendor: Promise Technology, Inc. Product web page: http://www.promise.com Affected version: 2.2.0.13 Summary: WebPAM is a web based Promise Array Management Software that's easy-to use, designed to simplif...
cPanel and WHM 11.25 'failurl' Parameter HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various...
PD9 Software MegaBBS 2.0/2.1 ladder-log.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection...
PD9 Software MegaBBS 2.0/2.1 view-profile.asp Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection...
formmail 1.92 Multiple Vulnerabilities
No description provided by source. FormMail 1.92 Multiple Vulnerabilities Name Multiple Vulnerabilities in FormMail Systems Affected FormMail 1.92 and possibly earlier versions Severity Medium Impact CVSSv2 Medium 4.3/10, vector: AV:N/AC:M/Au:N/C:P/I:N/A:N Vendor...
ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14063/info ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...
PHPSysInfo 2.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to cross-site scripting, HTTP...
Wordpress 1.2 Wp-login.PHP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11348/info Wordpress is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remot...
Xerver 4.31, 4.32 HTTP Response Splitting
No description provided by source. Xerver 4.31, 4.32 HTTP Response Splitting Discovered: 04-10-08 By: SecureState R&D Team - sasquatch Vendor Notified: 04-11-08 Vendor Response: 04-13-08 New version also vulnerable: 10-07-09 Tested Win32 v4.32 Vendor Notified: 10-07-09 Vendor Response: NONE...
W-Agora 4.1.6 a login.php loginuser Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL...
W-Agora 4.1.6 a subscribe_thread.php HTTP Response Splitting
No description provided by source. source: http://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL...