CVE-2008-2335

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

CVE-2008-2335

The CVE-2008-2335 entry describes a cross-site scripting (XSS) vulnerability in Vastal I-Tech phpVID 1.1 and 1.2 (also reported for 1.2.3) where an attacker can inject arbitrary script/HTML via the query parameter in search_results.php. Affected software: phpVID 1.1, 1.2 (and 1.2.3 per notes). Th...

CVE-2008-2335

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

[SECURITY] Fedora 8 Update: audacity-1.3.2-21.fc8

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3 files. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWindows and the audio I/O...

[xen-ia64] Dom0 panic while we run ftp test tool between HVM and Dom0.

The ssmi emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service dom0 panic via certain traffic, as demonstrated using an FTP stress test tool...

Unfixed XSS vulnerability at www.arbookclub.com

Security researcher i-landet, has submitted on 22/04/2008 a cross-site-scripting XSS vulnerability affecting www.arbookclub.com, which at the time of submission ranked 15167384 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...

Unfixed XSS vulnerability at www.searchgodsword.org

Security researcher i-landet, has submitted on 22/04/2008 a cross-site-scripting XSS vulnerability affecting www.searchgodsword.org, which at the time of submission ranked 154462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...

Design/Logic Flaw

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

CVE-2008-1845

The Korn shell aka mksh before R33d on MirOS aka MirBSD does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a...

Unfixed XSS vulnerability at www.i-gloo.net

Security researcher death-angel, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.i-gloo.net, which at the time of submission ranked 1672369 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/04/2010. It is...

Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...

Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

Vastal I-Tech Software Zone - cat_id SQL Injection

Vastal I-Tech Software Zone - catid SQL Injection --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

JVN#13159997 Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication

The authentication for the web administration interface for the WN-APG/R-Series and WN-WAPG/R-Series wireless LAN routers from I-O DATA DEVICE is disabled in the default configuration. This vulnerability may allow a remote attacker to access the web administration interface without authentication...

CVE-2008-1219

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

Sql injection

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

CVE-2008-1219

The vulnerability is in Kutub-i Sitte (KutubiSitte) version 1.1, a PHP-Nuke module. It allows SQL injection via the kid parameter in a hadisgoster action to modules.php, enabling remote attackers to execute arbitrary SQL commands. The connected PT-2008-2812 entry provides a mitigation: restrict a...