httpd security update

2.2.3-22.0.1.el53.1 - Replace index.html with oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.1 - add security fixes for CVE-2008-1678, CVE-2009-1195 499284...

Sql injection

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2008-6240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in data/views/index.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter...

IntelliTamper 2.07 - imgsrc Remote Buffer Overflow

IntelliTamper 2.07 - imgsrc Remote Buffer Overflow / IntelliTamper 2.07 imgsrc Remote Buffer Overflow Expoit Discovered & Written by r0ut3r writ3r at gmail.com Many Thanks to Luigi Auriemma http://aluigi.org Greets to shinnai http://www.shinnai.net and Guido Landi IntelliTamper contains a remote...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow Exploit (c)

No description provided by source. / IntelliTamper 2.0.7 html parser Remote Buffer Overflow Just a C version of Guido Landi's discovery. Written by r0ut3r writ3r at gmail.com kit:/home/r0ut3r/publichtml gcc -o intell intell.c kit:/home/r0ut3r/publichtml ./intell + Building payload + Success writi...

CVE-2008-0200: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 drop parameter...

CVE-2008-0218: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Vulnerabilities in RotaBanner

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в баннерной системе RotaBanner. Уязвимости в файле index.html в параметрах user и drop. XSS: http://site/account/index.html?user=3Cscript3Ealertdocument.cookie3C/script3E...

QuickTime RTSP Response Content-type remote stack rewrite exploit

Everyone Loves O|0+|O the Hypnotoad... |...| | | =o0O=====O0o=============================== | QuickTime RTSP Response Content-type | | remote stack rewrite exploit for IE 6/7 | | by Yag Kohha skyhole at gmail.com | =========================================== Exploit tested on: - Windows Vista -...

CVE-2003-1522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page...

CVE-2007-4159: Undefined Security Weakness

index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous RV 7.5.2 allows remote attackers to obtain sensitive information, such as a user name and IP addresses, via a direct request...

Moderate: httpd security update

2.0.46-67.ent.0.1 - index.html cleanup and logo removal 2.0.46-67.ent - rebuild 2.0.46-66.ent - modcache: follow upstream max-stale handling in CVE-2007-1863 fix 244662 2.0.46-65.ent - add security fixes for CVE-2007-1863 and CVE-2006-5752 244662 2.0.46-64.ent - fix ProxyErrorOverride to only...

CVE-2007-0529: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.html aka the administration page in PHP Link Directory phpLD 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted link, which is triggered when the administrator uses the "Validate Links" functionality...

Moderate httpd security update

2.0.52-28.1 - changed index.html to oracleindex.html 2.0.52-28.ent - add security fix for Expect header XSS CVE-2006-3918, 200732...

CVE-2006-5819: Undefined Security Weakness

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script...

CVE-2006-3258: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 filter or 2 sort parameters...

biblenet.txt

Biblenet.net Homepage: http://www.biblenet.net Affected files: gettinginvolved.html register.php member.php /library/index.html ----------------------------------------- Biblespace uses vBulletin for most of their site, so most of these vulns are based in the vbulletin site themselves, which othe...

CVE-2006-2484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...