250 matches found
CVE-2006-1107
Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
PT-2006-2134 · Nmdeluxe · Nmdeluxe
Name of the Vulnerable Software and Affected Versions: NMDeluxe versions prior to 1.0.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the news.php file. Recommendations: For versions prior to 1.0.1, update to...
CVE-2006-1107: Undefined Security Weakness
Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
Cyphor 0.19 - lostpwd.php?nick SQL Injection
Cyphor 0.19 - lostpwd.php?nick SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database...
[SA15739] Razor-agents Denial of Service Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2004-1599
CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...
CVE-2004-1599: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the 1 query or 2 nick parameters...
PISG 0.54 - IRC Nick HTML Injection
source: https://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be used. If an attacker specifies HTML...
CVE-1999-1261: Undefined Security Weakness
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname nick command...
bisonware.ftp.txt
Date: Mon, 17 May 1999 12:52:02 -0400 From: Russ To: [email protected] Subject: Vulnerabilities in BisonWare FTP Server 3.5 Arne Vidstrom submitted the following observations regarding BisonWare FTP Server 3.5. I contacted the authors of BisonWare and gave them a copy of Arne's...