9975 matches found
CVE-2008-6503
Multiple cross-site scripting XSS vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/login.php and 2 order.php...
CVE-2009-0758
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
DEBIAN-CVE-2009-0758
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
Code injection
The originatesfromlocallegacyunicastsocket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service network bandwidth and CPU consumpti...
CentOS Update for python CESA-2007:1077-01 centos2 i386
Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2007:1077-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Cross site scripting
Cross-site scripting XSS vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 language, 2 order, and 3 filter parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2008-6205
Cross-site scripting XSS vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 language, 2 order, and 3 filter parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2008-6205
CVE-2008-6205: XSS in seeurl.php of Xavier Flahaut URLStreet 1.0, with vulnerability in parameters (language, order, filter) allowing injection of arbitrary script/HTML. The problem is documented by NVD/NIST; no explicit remediation or patch details are provided in the connected documents. The CV...
Surat Diamond Blind SQL Injection
Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...
SalesCart (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details...
SalesCart - Authentication Bypass
----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details :http://www.salescart.com/demo.htm Order Management Plugin Create...
star-blindsql.txt
1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0"; $t = abs100-$w/$r100; echo "\nPassword: "; for $j = 1; $j = 32; $j++ for $i = 46; $i = 102; $i=$i+2 if $i == 60 $i = 98;...
Star Articles 6.0 - Blind SQL Injection (2)
Star Articles 6.0 - Blind SQL Injection 2 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0"; $t = abs100-$w/$r100; echo "\nPassword: "; for $j = 1; $j = 32; $j++ for $i = 46;...
Q-Shop 3.0 - Cross-Site Scripting / SQL Injection
000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...
DEBIAN-CVE-2008-4552
The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...
Mozilla BOM characters stripped from JavaScript before execution
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via byte order mark BOM characters that are removed from JavaScript code before...
Mozilla crashes with evidence of memory corruption
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...
CVE-2008-4065
Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via byte order mark BOM characters that are removed from JavaScript code before...
Spree Hash Restriction Weakness URL Parsing Order State Value Manipulation
Spree contains a hash restriction weakness that occurs when parsing a modified URL. This may allow an attacker to manipulate order state values...