2244 matches found
[SA21645] MyBB Avatar / Attachment Script Insertion Vulnerability
TITLE: MyBB Avatar / Attachment Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21645 VERIFY ADVISORY: http://secunia.com/advisories/21645/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x http://secunia.com/product/4479/...
[SA21611] PHP iAddressBook "cat_name" Script Insertion Vulnerability
TITLE: PHP iAddressBook "catname" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21611 VERIFY ADVISORY: http://secunia.com/advisories/21611/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP iAddressbook 0.x http://secunia.com/product/11678/ DESCRIPTION:...
[SA21610] PHP iAddressBook Cross-Site Scripting and Script Insertion
TITLE: PHP iAddressBook Cross-Site Scripting and Script Insertion SECUNIA ADVISORY ID: SA21610 VERIFY ADVISORY: http://secunia.com/advisories/21610/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP iAddressbook 0.x http://secunia.com/product/11678/...
[SA21565] indexcity SQL Injection and Script Insertion Vulnerabilities
TITLE: indexcity SQL Injection and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA21565 VERIFY ADVISORY: http://secunia.com/advisories/21565/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: indexcity 1.x...
[SA21603] Drupal Easylinks Module Script Insertion and SQL Injection
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
[SA21604] Drupal E-commerce Module Script Insertion Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
[SA21560] Links Manager SQL Injection and Script Insertion Vulnerabilites
TITLE: Links Manager SQL Injection and Script Insertion Vulnerabilites SECUNIA ADVISORY ID: SA21560 VERIFY ADVISORY: http://secunia.com/advisories/21560/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Links Manager...
Hacking skills: in the Real movie put Trojan horse-vulnerability warning-the black bar safety net
Frequently encountered rm the movie plays when pop-up web pages, has been do not know how, a few days ago saw the mass of software in an article only to know the insertion and removal method, a good dongdong dare not exclusive, in the online search of the three articles, The to everyone. In the...
[SA20990] Juniper Networks DX System Log Script Insertion
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Reversing must be a passion as your skills will be challenged on a daily basis and you will be working several hours everyday in IDA, Ollydbg, and with BinDiff. Often, it is also requir...
[SA21021] Drupal webform Module Script Insertion Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Cross-site scripting-vulnerability warning-the black bar safety net
What is cross-site scriptingCSS/XSS? We said the cross-site scripting refers to a remote WEB page's html code is inserted with the malicious purpose of the data, the user that the The page is trustworthy, but when the browser downloads the page, the embedded script will be interpreted, Sometimes...
WinSCP < 3.8.2 Arbitrary Command Insertion
Binary data 3648.prm...
[SA20441] OSADS Board Comments Script Insertion Vulnerability
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
dokuwiki -- multiple vulnerabilities
Multiple vulnerabilities have been reported within dokuwiki. dokuwiki is proven vulnerable to: arbitrary PHP code insertion via spellcheck module, XSS attack via "Update your account profile," bypassing of ACL controls when enabled...
[SA20285] Assetman Unspecified Script Insertion Vulnerabilities
TITLE: Assetman Unspecified Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA20285 VERIFY ADVISORY: http://secunia.com/advisories/20285/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Assetman 2.x http://secunia.com/product/10187/ DESCRIPTION: Nomenumbra...
magnolia.txt
Magnolia CMS Script Insertion Vulnerability Risk: Medium Class: Remote Script: Magnolia CMS Version: not define ------------------------------------------------------------------- Example: http://target/path/search.html?query=CODE&x=0&y=0 http://target/path/search.html?query=alert"lol";&x=0&y=0...
[SA20081] Website Baker "display_name" Script Insertion Vulnerability
TITLE: Website Baker "displayname" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA20081 VERIFY ADVISORY: http://secunia.com/advisories/20081/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Website Baker 2.x http://secunia.com/product/5455/ DESCRIPTION:...
FreeBSD : phpldapadmin -- XSS and Script Insertion vulnerabilities (6d78202e-e2f9-11da-8674-00123ffe8333)
Secunia reports : phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited t...
FreeBSD : bugzilla -- multiple vulnerabilities (46f7b598-a781-11da-906a-fde5cdde365e)
Some vulnerabilities have been reported in Bugzilla, which can be exploited by malicious users to conduct SQL injection attacks, and by malicious people to disclose sensitive information and conduct script insertion attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...
FreeBSD : phpbb -- multiple vulnerabilities (28c9243a-72ed-11da-8c1d-000e0c2e438a)
Multiple vulnerabilities have been reported within phpbb. phpbb is proven vulnerable to : - script insertion, - bypassing of protetion mechanisms, - multiple cross site scripting vulnerabilities, - SQL injection, - arbitrary code execution %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...