531 matches found
ICQ Client Cross-Application Scripting (XAS)
ICQ Client Cross-Application Scripting XAS by [email protected] Severity: Low Potential Impact: Remote script execution ICQ client in some condition is vulnerable to remote script injection into used Internet Explorer in My Computer Security Zone. Detailed description quote...
ICQ client cross application scripting
It's possible to inject script code into banner window to execute code in My Computer security zone...
My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== My Gaming Ladder Combo System ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder...
My Gaming Ladder Combo System 7.0 - Remote Code Execution
My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...
CVE-2006-1815
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...
CVE-2006-1810
CVE-2006-1810 involves multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA . The affected component is the user profile handling, with attacker-controlled inputs in fields such as ICQ, AIM, MSN, Google Talk, Website Name, Website Address, Email Address, Location, Signature, a...
ICQ is installed
The remote host is using ICQ - a p2p software, which may not be suitable for a business environment. OpenVAS Vulnerability Test $Id: icqinstalled.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: ICQ is installed Authors: Xue Yong Zhi Copyright: Copyright C 2003 Xue Yong Zhi This program is fr...
ICQ is installed
The remote host is using ICQ - a p2p software, which may not be suitable for a business environment. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CilemNews System 1.1 - yazdir.asp haber_id SQL Injection
CilemNews System 1.1 - yazdir.asp haberid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140...
CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages... use IO::Socket; if@ARGV + + Example: cilem.pl sux.c...
[Full-disclosure] MiniNuke CMS System all versions (pages.asp) SQL Injection
EDITED 20/02/2006 --Security Report-- Advisory: MiniNuke CMS System all versions pages.asp SQL Injection vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/02/06 10:31 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor:...
MiniNuke 1.8.2b - 'pages.asp' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Orginal advisory: http://www.nukedx.com/?viewdoc=9 Usage: mini.pl use IO::Socket; if@ARGV != 3 print " ++ +Welcome to MiniNuke CMS System all versions pages.asp SQL-inject...
CVE-2006-0766
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...
Design/Logic Flaw
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...
CVE-2006-0765
GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...
Design/Logic Flaw
GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...
CVE-2006-0766
ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions and bypass Windows security warnings via a filename that ends in an assumed-safe extension such as JPG, and possibly...
CVE-2006-0766
CVE-2006-0766 affects ICQ software on Windows (ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions). The vulnerability stems from the ability for an attacker to craft a filename that ends with a commonly trusted extension (e.g., .JPG) and potentially alter properties like co...
CVE-2006-0765
GUI display truncation vulnerability in ICQ Inc. formerly Mirabilis ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-assisted remote attackers to hide malicious file extensions, bypass Windows security warnings via a filename that is all uppercase and of a...