Command injection

The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...

CVE-2009-0257

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 content of indexed files to the a Indexed Search Engine indexedsearch system extension; b...

CVE-2009-0257

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 content of indexed files to the a Indexed Search Engine indexedsearch system extension; b...

CVE-2009-0257

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 content of indexed files to the a Indexed Search Engine indexedsearch system extension; b...

Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Broken Authentication and Session Management, Cross-Site Scripting, Insecure Randomness and Remote Command Execution. Component Type: TYPO3 Core Affected Versions: TYPO3 versions 4.0.0 to 4.0.9, 4.1.0 to 4.1.7, 4.2.0 to 4.2.3 Vulnerability...

PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability

No description provided by source. PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web programming language whic...

PHP 5.2.8 gd library - imageRotate() Information Leak

PHP 5.2.8 gd library - imageRotate Information Leak PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web...

CVE-2008-5498

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...

CVE-2008-5498

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...

Unfixed XSS vulnerability at www.klen-net.ru

Security researcher zyrus, has submitted on 07/09/2008 a cross-site-scripting XSS vulnerability affecting www.klen-net.ru, which at the time of submission ranked 1011724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currentl...

Unfixed XSS vulnerability at www.baltijostransportas.com

Security researcher F3nix, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting www.baltijostransportas.com, which at the time of submission ranked 917970 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It ...

mysql DoS in the InnoDB Engine

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

mysql DoS in the InnoDB Engine

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

CVE-2007-5925

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

Design/Logic Flaw

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

oracle10g-sql.txt

// / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov / / email: [email protected]...

CVE-2006-5069

Cross-site scripting XSS vulnerability in class.txindexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2006-5069

TYPO3 Indexed Search Cross Site Scripting (CVE-2006-5069) affects the Indexed Search 2.9.0 extension for Typo3 prior to version 4.0.2, via the search parameter in class.tx_indexedsearch.php. The issue allows remote attackers to inject arbitrary web script or HTML. Documented details from multiple...

CVE-2006-5069

Cross-site scripting XSS vulnerability in class.txindexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...

[Full-disclosure] Typo3 v4.x: XSS in extension "Indexed Search" v2.9.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There's a XSS issue in the 'Indexed search' extension 2.9.0 for Typo3. This extension is part of a default Typo3 4.0.x installlation. Typo3 4.0.2 fixes it. http://typo3.org/teams/security/security-bulletins/typo3-20060911-1/ Credits go to Mr. Ekkehard...