Exensive cPanel Cross Site Scripting

Description: cPanel 9.1.0-R85 is vulnerable to Cross Site Scripting XSS in almost every field which is returned to the browser. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the...

waraxe-2004-SA005.txt

================================================================================ waraxe-2004-SA005 ================================================================================ XSS in Php-Nuke 7.1.0 - part 2 ================================================================================ Autho...

OpenAutoClassifieds XSS attack

Critical: Less critical Impact: Cross Site Scripting Where: From remote Software: OpenAutoClassifieds 1.x Vendor: http://jonroig.com/freecode/openautoclassifieds/ Description: A vulnerability has been identified in OpenAutoClassifieds, which can be exploited by malicious people to conduct...

pMachine (PHP) : Include() Security Hole

Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...

sql injection vulnerability in WBB 2.0 RC1 and below

Hi, I discovered a serious vulnerability in Woltlab Burning Board 2.0 RC 1 and below some weeks ago. The latest version WBB 2.0 RC 2 seems not vulnerable, but there are still sites using vulnerable versiones. versions tested vulnerable WBB 2.0 RC 1 WBB 2.0 beta 5 WBB 2.0 beta 4 WBB 2.0 beta 3...

[SECURITY] [DSA 153-2] New mantis package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 153-2 [email protected] http://www.debian.org/security/ Martin Schulze August 20th, 2002 http://www.debian.org/security/faq -...

Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities

Author: Stan Bubrouski Date: 19 August 2002 Product: Bonsai Versions Affected: AllCurrent and CVS all vulnerable Severity: Cross Site Scripting is possible in several places due to a lack of stripping of tags from input. Some error messages also contain CSS and reveal the physical path of the...

SCO Unixware 7.0/7.0.1/7.1 - Xsco Buffer Overflow

// source: https://www.securityfocus.com/bid/824/info Under certain versions of Unixware, the SUID program Xsco is vulnerable to a buffer overflow attack. The problem lies in that Xsco does not sanity check user supplied data. // UnixWare7 /usr/X/bin/Xsco local, K2/cheez // // Xsco produces some...