237 matches found
Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection...
CVE-2010-1010
SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-1010
CVE-2010-1010 describes an SQL injection vulnerability in the TYPO3 MK Wastebasket (mk_wastebasket) extension, present in version 2.1.0 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability is documented across multiple sources...
CVE-2010-0322
SQL injection vulnerability in the init function in MK-AnydropdownMenu mkanydropdownmenu extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-0322
The CVE-2010-0322 entry concerns the MK-AnydropdownMenu (mk_anydropdownmenu) TYPO3 extension, affected in version 0.3.28 and earlier. The root cause is an SQL injection vulnerability in the extension’s init function, enabling remote attackers to execute arbitrary SQL commands via unspecified vect...
CVE-2010-0322
SQL injection vulnerability in the init function in MK-AnydropdownMenu mkanydropdownmenu extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Multiple vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third party TYPO3 extensions: MK-AnydropdownMenu mkanydropdownmenu, Photo Book gooffotoboek, SB Folderdownload sbfolderdownload, Developer log devlog, KJ: Imagelightbox kjimagelightbox2, Unit Converter cs2unitconv, powermail powermail, TV21...
Unfixed XSS vulnerability at www.jassbi.net
Security researcher MK and ESTEHKAK, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.jassbi.net, which at the time of submission ranked 309009 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...
Unfixed XSS vulnerability at mk-board.net
Security researcher kusomiso.com, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting mk-board.net, which at the time of submission ranked 632613 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...
MKP-NoBoard.txt
/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title MKPortal NoBoard BETA Script Download http://www.mkportal.it/index.php?ind=downloads&op=entryview&iden=804 d0rk "Powered by MK noboard" Spl0it http:// site...
Unfixed XSS vulnerability at mk-board.net
Security researcher kusomiso.com, has submitted on 04/09/2007 a cross-site-scripting XSS vulnerability affecting mk-board.net, which at the time of submission ranked 665901 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...
Unfixed XSS vulnerability at mk-board.net
Security researcher kusomiso.com, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting mk-board.net, which at the time of submission ranked 632613 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...
ShopXS v4.0 XSS vuln.
ShopXS v4.0 XSS vuln. Vuln. discovered by : r0t Date: 10 april 2006 vendor:MK Internet-Service GmbH vendorlink:http://www.shopxs.de/ affected versions:ShopXS-Version 4.00 and previous orginal advisory:http://pridels.blogspot.com/2006/04/shopxs-v40-xss-vuln10.html Vuln. Description: Input passed t...
CVE-1999-1094
The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...