326 matches found
Unfixed XSS vulnerability at www.ethelrosenfeld.org.br
Security researcher KaBuS, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting www.ethelrosenfeld.org.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. It is...
meth-xss.txt
!/usr/bin/php -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =-=-=-=-=-= ISSUE: SIP protocol's fields such as From, To, Call-ID, User-Agent and many others can carry html tags, wich are shown unfiltered by the Asterisk Log File tools located at...
Courier: Cross-site scripting vulnerability in SqWebMail
Background Courier is an integrated mail and groupware server based on open protocols. It provides ESMTP, IMAP, POP3, webmail, and mailing list services within a single framework. The webmail functionality included in Courier called SqWebMail allows you to access mailboxes from a web browser...
Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection
Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection source: https://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been...
def-2001-30
====================================================================== Defcom Labs Advisory def-2001-30 Oracle9iAS Web Cache/2.0.0.1.0 Multiple DoS and Buffer Overflow Authors: George Hedfors [email protected] Andreas Junestam [email protected] Release Date: 2001-10-18...