CVE-2006-6506

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...

CVE-2006-6506: Undefined Security Weakness

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...

RSS Feed-preview referrer leak — Mozilla

Jared Breland reported on LEGROOM.net that when the new "Feed Preview" feature in Firefox 2.0 retrieves the icons of the installed web-based feed viewers it is potentially informing those services of your feed-browsing habits by sending the URL of the feed in a referrer header with each icon...

CVE-2006-6369

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

blogsql.txt

Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...

Invision Community Blog Mod 1.2.4 - SQL Injection

Invision Community Blog Mod 1.2.4 - SQL Injection 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid...

CVE-2006-6020

Cross-site scripting XSS vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter...

CVE-2006-6020

CVE-2006-6020 is an XSS vulnerability in announce.php of Blog Torrent Preview 0.92, exploitable via the left parameter to inject script/HTML. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM) with network attack vector and no authentication, affecting confidentiality, integrity, and availa...

CVE-2006-6020: Undefined Security Weakness

Cross-site scripting XSS vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter...

BlogTorrent Preview 0.92 - Announce.php Cross-Site Scripting

BlogTorrent Preview 0.92 - Announce.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to hav...

BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

CVE-2006-5900

Cross-site scripting XSS vulnerability in the incubator/tests/Zend/Http/files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters...

CVE-2006-5900: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the incubator/tests/Zend/Http/files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters...

CVE-2006-5717

CVE-2006-5717 specifies multiple XSS vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0. Affected are the samples/ basedemo.php and calenderdemo.php (and other unspecified files). Remote attackers can inject arbitrary web script or HTML via unspecified parameters. CVSS v...

MyBB 1.1.2 New XSS

// MyBB 1.1.2 New XSS File :- private.php Ver. :- $do = $mybb-input'do'; Line :- 260 Action :- Preview HTTP Proof :-...

CVE-2006-1452

Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...

CVE-2006-1452

CVE-2006-1452: In Apple Mac OS X, the Preview component suffers a stack-based buffer overflow up to OS X 10.4.6, allowing local users to execute arbitrary code via a deep directory hierarchy. The provided connected documents reiterate the affected product and the local-execution impact but do not...

CVE-2006-1452: Undefined Security Weakness

Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy...

CVE-2006-2277

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...

CVE-2006-2277: Undefined Security Weakness

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...