PHP Live! XSS status_image.php

Date: 03/22/2006 Vendor: OSI Codes Product: PHP Live! Versions: tested 3.0 Vulnerability: Cross Site Scripting Location: statusimage.php Exploit: /phplive/js/statusimage.php?baseurl=scriptalertdocument.cookie/script Stumbled across this while auditing a web server, vendor has been notified...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2006:0262 Updated kdegraphics packages that fully resolve a security issue in kpdf are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for th...

security flaw

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4134

CVE-2005-4134 affects Mozilla Firefox 1.5, Netscape 8.x (8.0.4 and 7.2) and K-Meleon prior to 0.9.12. A remote attacker can cause a denial of service (high CPU usage and delayed startup) by presenting a website with a large title, which is stored in history.dat but not efficiently processed durin...

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

KLA10231 DoS vulnerability in browser

An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Related products Mozilla-Firefox K-Meleon Netscape CVE list...

CVE-2005-3868

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term, 2 id, 3 stat, and 4 source parameters to index.php, and 5 through the image parameters with an add request...

CVE-2005-3868

CVE-2005-3868 affects K-Search 1.0 and earlier. Multiple SQL injection vulnerabilities exist in index.php via the (1) term, (2) id, (3) stat, and (4) source parameters, and also through image parameters with an add request. The NVD entry indicates remote attackers could potentially execute arbitr...

CVE-2005-3868

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 term, 2 id, 3 stat, and 4 source parameters to index.php, and 5 through the image parameters with an add request...

K-Search Multiple vuln.

K-Search Multiple vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/k-search-multiple-vuln.html Vendor:http://turn-k.net/k-search affected version:1.0 and prior Product Description: K-Search is very fast and highly customizable meta-search...

[SA17295] phpBB Avatar Script Insertion Vulnerability

TITLE: phpBB Avatar Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17295 VERIFY ADVISORY: http://secunia.com/advisories/17295/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpBB 2.x http://secunia.com/product/463/ DESCRIPTION: K-Gen has discovered a...

security flaw

The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

CVE-2005-2261

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

CVE-2005-2261

CVE-2005-2261 affects multiple browsers: Firefox <1.0.5, Thunderbird <1.0.5, Mozilla

CVE-2005-2261

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...