CVE-2010-3489

Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...

CVE-2010-3489

CVE-2010-3489 is a documented XSS vulnerability in Netautor Professional/Digital Workroom. The affected component is login2.php (goback parameter) in Netautor Professional 5.5.0; input passed to goback is not properly sanitized, enabling arbitrary HTML/script execution in a user’s browser. Multip...

CVE-2010-3489

Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...

Adobe - FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (1)

$Id: adobeflatedecodepredictor02.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Netautor Professional 5.5.0 Cross Site Scripting

Netautor Professional 5.5.0 goback XSS Vulnerability Vendor: /digiconcept/ Product web page: http://www.digiconcept.net Affected version: 5.5.0 and DW 5.3.1 Summary: Netautor Professional is an application server and development environment. Netautor Professional was developed to serve the...

Netautor Professional 5.5.0 (goback) XSS Vulnerability

Summary Netautor Professional is an application server and development environment. Netautor Professional was developed to serve the practical needs of users, and was continuously advanced. -- Digital Workroom is a well proven and time-tested Content Management System. Its based on also...

Netautor Professional 5.5 - 'login2.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43290/info Netautor Professional is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting...

Netautor Professional 5.5 - login2.php Cross-Site Scripting

Netautor Professional 5.5 - login2.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43290/info Netautor Professional is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Microsoft Windows RPC Memory Allocation Remote Code Execution Vulnerability

Description Microsoft Windows RPC is prone to a remote code-execution vulnerability. An attacker can exploit this issue by sending a specially crafted RPC request to an affected computer. Successfully exploiting this issue will allow the attacker to execute arbitrary code with full system rights,...

Botnet-For-Hire Model Resurfaces in New IMDDOS Botnet

Researchers have identified a new botnet based in China that was openly selling DDoS-for-hire services and had managed to plant roots inside a number of major U.S. ISPs. The botnet, known as IMDDOS, is mostly contained right now and the researchers are working with authorities to locate its...

JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

Professional Site Immobiliare SQL Injection

============ Advisory 25/08/2010 ============= Professional Site Immobiliare Multiple vulnerabilities Vendor's Description of Software: http://www.sitomastro.com Application Info: Name: Professional Site Immobiliare =============================================== Vulnerability Info: Type: SQL...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

CorelDRAW X3 13.0.0.576 DLL Hijacking Exploit

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

Adobe Extension Manager CS5 5.0.298 - dwmapi.dll DLL Hijacking

Adobe Extension Manager CS5 5.0.298 - dwmapi.dll DLL Hijacking / Adobe Extension Manager CS5 v5.0.298 dwmapi.dll DLL Hijacking Exploit Vendor: Adobe Systems Inc. Product Web Page: http://www.adobe.com Affected Version: CS5 v5.0.298 Summary: Easily install new extensions and manage the ones you...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking (dwmapi.dll)

Exploit for windows platform in category local exploits ===================================================================== Adobe ExtendedScript Toolkit CS5 v3.5.0.52 DLL Hijacking dwmapi.dll ===================================================================== / Adobe ExtendedScript Toolkit CS...

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc...

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking

NullSoft Winamp 5.581 - wnaspi32.dll DLL Hijacking / Nullsoft Winamp 5.581 wnaspi32.dll DLL Hijacking Exploit Vendor: Nullsoft. Product Web Page: http://www.winamp.com Affected Version: 5.581 x86 Summary: Winamp is a media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL...