5912 matches found
CVE-2006-6020
CVE-2006-6020 is an XSS vulnerability in announce.php of Blog Torrent Preview 0.92, exploitable via the left parameter to inject script/HTML. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM) with network attack vector and no authentication, affecting confidentiality, integrity, and availa...
CVE-2006-6020: Undefined Security Weakness
Cross-site scripting XSS vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter...
BlogTorrent Preview 0.92 - Announce.php Cross-Site Scripting
BlogTorrent Preview 0.92 - Announce.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
CVE-2006-5900
Cross-site scripting XSS vulnerability in the incubator/tests/Zend/Http/files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters...
CVE-2006-5900: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the incubator/tests/Zend/Http/files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters...
CVE-2006-5717
CVE-2006-5717 specifies multiple XSS vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0. Affected are the samples/ basedemo.php and calenderdemo.php (and other unspecified files). Remote attackers can inject arbitrary web script or HTML via unspecified parameters. CVSS v...
MyBB 1.1.2 New XSS
// MyBB 1.1.2 New XSS File :- private.php Ver. :- $do = $mybb-input'do'; Line :- 260 Action :- Preview HTTP Proof :-...
CVE-2006-1452
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...
CVE-2006-1452
CVE-2006-1452: In Apple Mac OS X, the Preview component suffers a stack-based buffer overflow up to OS X 10.4.6, allowing local users to execute arbitrary code via a deep directory hierarchy. The provided connected documents reiterate the affected product and the local-execution impact but do not...
CVE-2006-1452: Undefined Security Weakness
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...
CVE-2006-2277
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...
CVE-2006-2277: Undefined Security Weakness
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...
Sql injection
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
security flaw
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...
Apple Mac OSX 10.x - .zip BOMStackPop() Overflow
Apple Mac OSX 10.x - .zip BOMStackPop Overflow source: https://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A...
Apple Mac OSX 10.x - LZWDecodeVector .tiff Overflow
Apple Mac OSX 10.x - LZWDecodeVector .tiff Overflow source: https://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. ...
Apple Mac OSX 10.x - LZWDecodeVector '.tiff' Overflow
source: https://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker may exploit these issues to execut...
security flaw
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...
security flaw
Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to gain chrome privileges via multiple attack vectors related to the use of XBL scripts with "Print Preview"...