CVE-2007-4115

IT!CMS (itcms) 0.2 is affected by multiple XSS vulnerabilities. The flaw allows remote attackers to inject arbitrary script/HTML via the wndtitle parameter in lang-en.php, menu-ed.php, or titletext-ed.php. Root cause is not explicitly detailed in the provided documents; CVSS data indicates a MEDI...

CVE-2007-4115: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker...

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

No description provided by source. SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t...

squirrel-exec.txt

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

Exploit for unknown platform in category web applications ================================================================ SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln ================================================================ SquirrelMail G/PGP Encryption Plug-in Remote...

SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution

SquirrelMail GPGP Encryption Plugin 2.0 - Command Execution SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from...

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability

SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...

wheatblog-rfi.txt

Found by E.Minaev [email protected] ITDefence.ru 1 SQL Injection in login function. With help of this injection is possible to make per-symbol brute of tables names of blog's database magicquotesgpc should be tured off. ------------------------------------------ "$sql = "select from $tblUse...

Security feature bypass

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...

CVE-2007-3233

CVE-2007-3233 concerns the TEC-IT TBarCode OCX ActiveX control, version 7.0.2.3524 (TBarCode7.ocx). The vulnerability allows remote attackers to overwrite arbitrary files via the SaveImage method. The NVD entry lists a network impact with low attack complexity and no authentication required, resu...

CVE-2007-3233: Undefined Security Weakness

The TEC-IT TBarCode OCX ActiveX control TBarCode7.ocx 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage method...