1251 matches found
CVE-2006-0518
Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2006-0518
Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2006-0518
Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2006-0518
CVE-2006-0518 is an XSS vulnerability in SPIP’s index.php3 that allows remote attackers to inject arbitrary script or HTML via the lang parameter. Affected software includes SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier. Related OpenVAS entries describe SPIP
CVE-2006-0518: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2005-4557: Undefined Security Weakness
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...
VulnCheck KEV: CVE-2005-4557
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...
CVE-2005-4491
Multiple cross-site scripting XSS vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query string, 2 textonly, 3 locID, and 4 lang parameters to a Default.aspx, and the 6 ClickFrom parameter to b Request-call-back.html and c...
CVE-2005-4491
Multiple cross-site scripting XSS vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query string, 2 textonly, 3 locID, and 4 lang parameters to a Default.aspx, and the 6 ClickFrom parameter to b Request-call-back.html and c...
CVE-2005-4017
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message...
CVE-2005-4017: Undefined Security Weakness
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message...
CVE-2005-3876: Undefined Security Weakness
Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 lang parameters...
Snort <= 2.4.2 Back Orifice Pre-Preprocessor Remote Exploit (4)
Exploit for linux platform in category remote exploits =============================================================== Snort hey xwings 03:07 why don't you come up and see me sometime? Tested on : Linux debian24 2.4.27-2-386 1 Mon May 16 16:47:51 JST 2005 i686 GNU/Linux gcc version 3.3.5 Debian...
CVE-2004-2256: Undefined Security Weakness
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang language variable...
CVE-2002-2002: Undefined Security Weakness
Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long 1 LANG and 2 LOCPATH environment variables...
CVE-2005-2162: Undefined Security Weakness
PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter...
CVE-2005-1998: Undefined Security Weakness
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...
CVE-2003-1180: Undefined Security Weakness
Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences in the basepath or pollvarslang parameters to the admin files 1 index.php, 2 admintplnew.php, 3 admintplmiscnew.php, 4...
CVE-2005-1445: Undefined Security Weakness
Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to 1 delete arbitrary files via the id parameter in a rmattach action to 5.php, or 2 read arbitrary files via the lang parameter to index.php...