Unfixed XSS vulnerability at tipp.sunchon.ac.kr

Security researcher WHK, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting tipp.sunchon.ac.kr, which at the time of submission ranked 2310914 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is current...

CVE-2007-1302

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

Sql injection

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

CVE-2007-1302

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

CVE-2007-1302

CVE-2007-1302 affects LI-Guestbook versions 1.1 and 1.2. The vulnerability is a SQL injection in guestbook.php triggered via the country parameter when magic_quotes_gpc is disabled. Remote attackers could potentially execute arbitrary SQL commands as described across multiple sources, with the no...

LI-Guestbook SQL Injection Vulnerability

New Advisory: LI-Guestbook SQL Injection Vulnerability http://belsec.com/advisories/139/summary.html --------------------Summary---------------- Belsec ID: BS0001 Vendor: LI-Scripts Vendor's Web Site: http://www.liscripts.net Software: LI-Guestbook Sowtware's Web Site:...

Design/Logic Flaw

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...

CVE-2006-1988

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...

PT-2006-2224 · Sergey Korostel · Sergey Korostel Php Upload Center

Name of the Vulnerable Software and Affected Versions: Sergey Korostel PHP Upload Center affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a name that ends in a .php.li extension. This file can then be accessed fr...