Planet Script 1.x - 'idomains.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40203/info Planet Script is prone to a cross-site scripting vulnerability because the it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Planet <= 2.x Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ================================================= Planet alertdocument.cookie; Live Demo : http://www.saudilead.com http://jsr-host.com/ GreeTz : RENO 3 - Saudi ViruS TeaM 3 - Mr.NrFzH 3 - Mr.End 3 - T3rr0risT 3 - ALL My FrindS 3 0day.today...

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

Stack overflow

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

CVE-2009-3637

Stack-based buffer overflow in the MAddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command...

CVE-2009-3637

The CVE-2009-3637 issue affects Alien Arena (Red Planet Arena Alien Arena) 7.30, where a stack-based buffer overflow occurs in M_AddToServerList (client/menu.c). An attacker can cause remote code execution by sending a crafted server description to UDP port 27901, followed by a long print command...

CVE-2009-2937

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

CVE-2009-2937

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

Cross site scripting

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

CVE-2009-2937

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

CVE-2009-2937

Removed by vendor...

CVE-2009-2937

Summary: CVE-2009-2937 is a cross-site scripting (XSS) vulnerability affecting Planet 2.0 and Planet Venus. The issue allows remote attackers to inject arbitrary web script or HTML through the SRC attribute of an IMG element in a feed. The connected sources reiterate the same description, with Re...

CVE-2009-2937

Cross-site scripting XSS vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed...

Fedora 10 : planet-2.0-10.fc10 (2009-9601)

security patch to sanitize content from rss feeds for JavaScript Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

[SECURITY] Fedora 10 Update: planet-2.0-10.fc10

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

[SECURITY] Fedora 11 Update: planet-2.0-10.fc11

Planet is a flexible feed aggregator, this means that it downloads feeds and aggregates their content together into a single combined feed with the latest news first. It uses Mark Pilgrim's Ultra-liberal feed parser so can read from RDF, RSS and Atom feeds and Tomas Styblo's template library to...

Fedora Core 10 FEDORA-2009-9601 (planet)

The remote host is missing an update to planet announced via advisory FEDORA-2009-9601. OpenVAS Vulnerability Test $Id: fcore20099601.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9601 planet Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Planet 2.0 - HTML Injection

Planet 2.0 - HTML Injection source: https://www.securityfocus.com/bid/36392/info Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would...

Unfixed XSS vulnerability at www.planet-provence.com

Security researcher Mystick, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.planet-provence.com, which at the time of submission ranked 1634043 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It i...