157 matches found
CVE-2007-1028
Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...
Cross site scripting
Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...
CVE-2007-1028
CVE-2007-1028 is an XSS vulnerability in the Drupal module Barry Jaspan Image Pager (versions 4.7.x-1.x-dev and 5.x-1.x-dev prior to 2007-02-08). Remote attackers can inject arbitrary web script or HTML via vectors related to HTML entities and the IMG element. The exact exploitation vectors are n...
CVE-2007-1028
Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...
Image pager - Cross site scripting
The Image Pager module uses JavaScript to collect selected images from a page and display them one at a time in a block with previous/next pager links. HTML entities are decoded by the DOM functions used by Image Pager before being reinserted into the web page for display. As a result, a maliciou...
[SECURITY] Fedora Core 5 Update: w3m-0.5.1-15.fc5
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
[SECURITY] Fedora Core 6 Update: w3m-0.5.1-15.fc6
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
Debian DSA-076-1 : most - buffer overflow
Pavel Machek has found a buffer overflow in the most' pager program. The problem is part of most's tab expansion where the program would write beyond the bounds two array variables when viewing a malicious file. This could lead into other data structures being overwritten which in turn could enab...
CVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...
CVE-2001-0743
Vulnerability CVE-2001-0743 affects O'Reilly WebBoard Pager 4.10. The issue: improper input validation allows remote attackers to trigger arbitrary JavaScript execution on other WebBoard users’ systems by sending a message containing an escaped single quote followed by JavaScript commands, which ...
Linux Man Page 6.16.27.07.1- Source Buffer Overflow
Linux Man Page 6.16.27.07.1- Source Buffer Overflow source: https://www.securityfocus.com/bid/2872/info A buffer overflow vulnerability exists in the implementation of the 'man' system manual pager program commonly included with Linux distributions. The vulnerability exists due to the way the...
Javascript в O'Reilly WebBoard (javascript execution)
Можно вставить javascript в pager-message...
DoS против Allegro Rom Pager
Несколько некорректных HTTP-запросов приводят к зависанию оборудования использующего данный HTTP-сервер для управления...
CVE-2000-0047
Yahoo Messenger/Pager DoS vulnerability (CVE-2000-0047): buffer overflow in the Yahoo Messenger/Pager client allows a remote attacker to cause denial of service by processing a long URL within a message. Affected component: Yahoo Messenger/Pager client. CVSSv2 base score: 5.0 (Network, Low access...
PT-1999-1852 · Yahoo · Yahoo Pager/Messenger
Name of the Vulnerable Software and Affected Versions: Yahoo Pager/Messenger client affected versions not specified Description: A buffer overflow issue exists, allowing remote attackers to cause a denial of service by sending a long URL within a message. Recommendations: At the moment, there is ...
yahoo-pager-chat-control.txt
Date: Mon, 4 Jan 1999 01:50:53 GMT From: anonymous To: [email protected] Subject: Yahoo Pager Flaw In Chat Control = Yahoo Pager Chat Flaw In Chat Control Yahoo's Pager is very sloppy.. Yahoo's Pager doesn't have message control.. therefore it does not have chat request control.. so this...
yahoo-pager-id.txt
Date: Fri, 25 Dec 1998 09:31:21 -0600 From: Nathan Neulinger Reply-To: Bugtraq List To: [email protected] Subject: Yahoo Pager - security bug w/ services 7,8 I've been working on a GTK unix yahoo pager client based on Doug Winslow's yppro2.c source and found the following security problem whil...