stylingwebben.se XSS vulnerability

Vulnerable URL: http://www.stylingwebben.se/belysning-for-fordon/led-slingor/p/slimmad-led-slinga?addtocart=1variant101=variant1035=variant439=variant440=variant441=variant442=variant443=variant1036=variant444=variant445=variant446=variant447=variant1250=variant448="'; Details: Description| Value...

ucanr.edu XSS vulnerability

Vulnerable URL: http://ucanr.edu/blogs/blogcore/blogsearch.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49513 Google Pagerank| 7 VIP website status:| Yes Check ucanr.edu SSL...

PT-2023-25550 · Monetdb +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the rel sequences component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server versions 11.45.17 and...

Sphider Multiple Vulnerabilities (Aug 2014)

Sphider is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Content-Builder (CMS) 0.7.5 - Multiple Include Vulnerabilities

No description provided by source. ----------------------------------------------------- Advisory id: FSA:012 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: Content-Builder CMS 0.7.5, Remote command execution Type: high Product: http://www.content-builder.de/ Patch: unavailable...

PT-2014-2132 · Red Hat · Spacewalk

Name of the Vulnerable Software and Affected Versions: Spacewalk version 1.6 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vectors related to this issue are Search forms...

PT-2013-1353 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 9.0 through 10 Description: The issue is related to the administrator.cfc component in Adobe ColdFusion, which allows remote attackers to bypass authentication and possibly execute arbitrary code. This is achieved by...

HP Diagnostics Server magentservice.exe Integer Wrap

Added: 01/26/2012 CVE: CVE-2011-4789 BID: 51398 OSVDB: 78309 Background HP Diagnostics software monitors application transaction health in traditional, virtualized and cloud environments. Problem A vulnerability exists in the way the magentservice.exe service handles network requests. Subtraction...

Lotus Domino HPRAgentName Stack Overflow

Added: 07/08/2011 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem The WebAdmin.nsf resource on the Domino web service contains a buffer overflow vulnerability. Resolution No patch is available at this time. References Limitations This exploit...

VMware 2 Web Server Directory Traversal Vulnerability (Windows)

This host is installed with VMware 2 Web Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbvmwarewebserverdirtravvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware 2 Web Server Directory Traversal Vulnerability Windows Authors: Sooraj KS Copyright:...

TortoiseSVN Insecure Library Loading Vulnerability

This host is installed with TortoiseSVN and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: gbtortoisesvninsecurelibloadvuln.nasl 8169 2017-12-19 08:42:31Z cfischer $ TortoiseSVN Insecure Library Loading Vulnerability Authors: Sooraj KS Copyright: Copyright c...

DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability

Title ----- DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- November 19, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Rob Kraus, Chris Graham and r@b13$ Vulnerability Description...

Anti-Trojan Elite和Anti-Keylogger Elite IOCTL请求本地权限提升漏洞

BUGTRAQ ID: 32202 Anti-Trojan Elite和Anti-Keylogger Elite是ISecSoft推出的防木马和侦测键盘记录器工具。 Anti-Keylogger Elite的AKEProtect.sys驱动没有正确地验证通过IOCTL 0x002224A4、0x002224C0和0x002224CC所接收到的参数，Anti-Trojan Elite的Atepmon.sys驱动没有正确地验证通过IOCTL 0x00222494所接收到的参数，本地管理员启动Anti Trojan Elite或Anti-Keylogger...

Multiple vulnerabilities in HP OpenView NNM 7.53

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv B multiple buffer-overflows in ovalarmsrv C Denial of Service in ovalarmsrv Exploitation:...

Hamachi Password Disclosure Vulnerability

Hamachi VPN Client 1.0.2.5 Password Disclosure Vulnerability 1 Infos --------- Date : 2008-03-24 Product : Hamachi VPN Client 1.0.2.5 Version : 1.0.2.5 Vendor : www.hamachi.it/ Vendor Status : 2008-03-24 - Not Informed Discovered/Provided By : Giuseppe Evilcry Bonfa' - http://evilcry.altervista.o...

RunCMS Common.PHP本地文件包含漏洞

RunCMS Common.PHP Local File Include Vulnerability RunCMS是一款基于PHP的WEB应用程序。 RunCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'Common.PHP'脚本对用户提交的WEB参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 RunCMS RunCMS 1.5.3 RunCMS RunCMS 1.5.2 Build 20070504 RunCMS RunCMS 1.5.2 RunCMS RunCMS...

PT-2007-4630 · Myevent · Myevent

Name of the Vulnerable Software and Affected Versions: MyEvent version 1.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myevent path parameter in the includes/template.php file. A reliable third party disputes this issue, stating that the entire fi...

PT-2007-2135 · Extcalendar · Extcalendar

Name of the Vulnerable Software and Affected Versions: ExtCalendar versions 2 and earlier Description: The issue allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to...

PT-2006-6665 · My-Bic · My-Bic

Name of the Vulnerable Software and Affected Versions: My-BIC version 0.6.5 Description: A remote file inclusion issue in mybic server.php allows remote attackers to execute arbitrary PHP code via a URL in the INC PATH parameter. This issue is disputed by third-party researchers because INC PATH ...

PT-2006-6517 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the showRevisions parameter in the "index.php" file. Recommendations: For...