lotus-exec.txt

Hello, I have found that the lotus expeditor rcplauncher as installed by lotus symphony and possibly other products, registers a cai: uri handler. This handler executes "D:\Program Files\IBM\Lotus\Symphony\framework\rcp\rcplauncher.exe" -config notes -com.ibm.rcp.portal.app.uiopenCA "%1" the...

TippingPoint IPS - Unicode Character Detection Bypass

TippingPoint IPS - Unicode Character Detection Bypass source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to...

TippingPoint IPS - Unicode Character Detection Bypass

source: https://www.securityfocus.com/bid/24855/info TippingPoint IPS is prone to a detection-bypass vulnerability because the appliance fails to properly handle Unicode characters. A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable...

PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities

PHPWebFTP 2.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17688/info phpWebFTP is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input using the HTTP 'POST'...

Land Down Under < 802 events.php SQL Injection

Binary data 3209.prm...

Sawmill < 7.1.6 Multiple Vulnerabilities

Binary data 2947.prm...

MaxWebPortal < 1.360 Multiple Vulnerabilities

Binary data 2898.prm...

Invision Board Multiple XSS and SQL Injection

Binary data 2879.prm...

PHP Photo Album < 2.0.14 Multiple Vulnerabilities

Binary data 2821.prm...

XMB Forum < 1.9.8 SQL Injection and XSS Vulnerabilities

Binary data 2747.prm...

CoolForum SQL and XSS Vulnerabilities

Binary data 2725.prm...

PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability

Binary data 2726.prm...

punBB < 1.2.5 Multiple SQL Injection and Authentication Bypass Vulnerabilities

Binary data 2715.prm...

yabbXSS.txt

PersianHacker.NET 200503-08 YaBB2 rc1 XSS Vulnerability Date: 2005 March Bug Number: 08 bid:12756 YaBB is a leading free forum software package that rivals any professional message board out there. It provides a real-time chat and support system for your visitors. More info @:...

PHP-Fusion < 5.01 BBcode IMG Tag XSS

Binary data 2682.prm...

[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability

PersianHacker.NET 200505-06 paNews v2.0b4 XSS Vulnerability Date: 2005 February Bug Number: 06 paNews is a news management script to use on your site. Users can use paCode, special code designed to allow the adding of images and font changes in the posts without allowing users to use HTML to post...

osCommerce 2.2 - 'Contact_us.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12568/info A vulnerability is reported to exist in osCommerce that may allow a remote user to launch cross-site scripting attacks. This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this...

PHP-Nuke 6.x/7.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12561/info It is reported that PHP-Nuke is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to create a...

WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities

WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12009/info It is reported that WorkBoard is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI...

WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12009/info It is reported that WorkBoard is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to create ...