357 matches found
MS Internet Explorer WebViewFolderIcon setSlice() Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer WebViewFolderIcon setSlice Overflow Exploit ================================================================== This module is part of the metasploit...
Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)
Microsoft Internet Explorer - WebViewFolderIcon setSlice Overflow Metasploit 1 This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice 'Internet Explorer WebViewFolderIcon...
Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)
This module is part of the metasploit framework3 svn co http://metasploit.com/svn/framework3/trunk/ require 'msf/core' module Msf class Exploits::Windows::Browser::WebViewSetSlice 'Internet Explorer WebViewFolderIcon setSlice Overflow', 'Description' = %q This module exploits a flaw in the...
OZJournal v1.5 - XSS
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
CVE-2006-3821
Multiple cross-site scripting XSS vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lang parameter in a indexlist.php and 2 year, 3 month, and 4 day parameter in b registration.php...
DEBIAN-CVE-2006-3682
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the 1 year, 2 pluginmode or 3 month parameters...
Sql injection
SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
Directory traversal
Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain files via the month parameter...
Sql injection
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php date.php was originally reported, but this appears to be in error...
CVE-2006-0775
BirthSys 3.1 contains SQL Injection in show.php exploitable via the $month parameter. The vulnerability allows remote attackers to craft arbitrary SQL queries; there is mention of an additional vector for $date/data.php that is considered in error. Public sources report exploitation is available ...
Cross site scripting
Cross-site scripting XSS vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 month or 2 year parameter to index.php...
CVE-2006-0333
Cross-site scripting XSS vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 month or 2 year parameter to index.php...
Sql injection
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...
CVE-2005-2658
Buffer overflow in utility.cpp in Turquoise SuperStat turqstat 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month...