9974 matches found
PT-2007-2983 · Unknown · Weekly Drawing Contest
Name of the Vulnerable Software and Affected Versions: Weekly Drawing Contest version 0.0.1 Description: The issue allows remote attackers to potentially read arbitrary files via a .. dot dot in the order parameter in the check vote.php file. However, it is noted that another researcher disputes...
MySQL subselect DoS
NULL pointer dereference if string function is applied to select with "order by" result...
CVE-2006-7232
sqlselect.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service crash via an EXPLAIN SELECT FROM on the INFORMATIONSCHEMA table, as originally demonstrated using ORDER BY...
ECWShopindex.php远程SQL注入漏洞 Exploit
No description provided by source. 跨站脚本： http://www.victim.com/index.php?c=srch&ctg=Cat1&id=754ce025144839c2abe369c36d90d8e9&key=1&comp=1&min=1&max=scriptvar%20xss=31337;alertxss;/script 信息泄漏和可能的SQL注入:...
Mega Mall - order-track.php?orderNo SQL Injection
Mega Mall - order-track.php?orderNo SQL Injection source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
Mega Mall - 'order-track.php?orderNo' SQL Injection
source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...
CVE-2006-4871
SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...
security flaw
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ATutor = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 ec...
ATutor 1.5.3.1 - 'links' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass OPTIONS\r\n"; echo "host: target server...
security flaw
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
security flaw
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
ezWaiter30.txt
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...
ezWaiter v3.0 - XSS
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...
CVE-2006-2783
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
Cross site scripting
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
DEBIAN-CVE-2006-2783
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark BOM from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting XSS attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT...
Firefox Tag Order Vulnerability
nsHTMLContentSink.cpp in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors involving a "particular sequence...
Buffer overflow
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln 1 APPS03 in a iProcurement; 2 APPS04 in b Oracle Application Object Library; 3 APPS06, 4 APPS07, and 5 APPS08 in c Oracle Applications Technology...
CVE-2006-1882
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln 1 APPS03 in a iProcurement; 2 APPS04 in b Oracle Application Object Library; 3 APPS06, 4 APPS07, and 5 APPS08 in c Oracle Applications Technology...