238 matches found
CVE-2008-3101: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the parenttab parameter in an index action to the Products module, as reachable through index.php; 2 the userpassword parameter in an Authenticate action to th...
CVE-2008-3714
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the querystring, a different vulnerability than CVE-2006-3681 and CVE-2006-1945...
CVE-2008-3714: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the querystring, a different vulnerability than CVE-2006-3681 and CVE-2006-1945...
CVE-2007-1828
Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...
Open redirect
web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERYSTRING...
CVE-2007-1831: Undefined Security Weakness
web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERYSTRING...
CVE-2007-1831
web-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write "wrong data" via a crafted QUERYSTRING...
CVE-2007-1828: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow remote authenticated users to inject arbitrary web script or HTML via 1 the QUERYSTRING corresponding to drop downs or 2 various forms...
CVE-2007-1831
CVE-2007-1831 affects web-app.org WebAPP prior to 0.9.9.6. The issue allows remote authenticated users to open files and write the string "wrong data" through a crafted QUERY_STRING. Impact and remediation are not elaborated beyond the described behavior in the provided sources; exploitation deta...
CVE-2006-3585: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the 1 login parameter in admin/cms/index.php, 2 unspecified parameters in the "Supply news" page in formmail.php, 3 the URL in the "Site statistics" page, and...
CVE-2005-4780
CVE-2005-4780 affects Fidra Lighthouse CMS 1.1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that could allow remote attackers to inject arbitrary web script or HTML via the search parameter in the query string on the home page. The vendor disputes the issue, arguing Light...
CVE-2005-4780: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a querystring to the home page. NOTE: The vendor disputes this issue, saying "Lighthouse does not in any way make use of the...
Apache Httpd < 1.3.22 : Multiviews can cause a directory listing to be displayed
A vulnerability was found when Multiviews are used to negotiate the directory index. In some configurations, requesting a URI with a QUERYSTRING of M=D could return a directory listing rather than the expected index page...
CVE-2001-0223
Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...
CVE-2001-0223
The CVE-2001-0223 issue concerns the wwwwais CGI (wwwwais) on affected web servers. A buffer overflow in the CGI allows remote attackers to execute arbitrary commands by crafting a long QUERY_STRING in an HTTP GET request. The Nessus entry reiterates that the wwwwais CGI has a flaw enabling arbit...
CVE-2001-0223: Undefined Security Weakness
Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERYSTRING HTTP GET request...
CVE-2000-0398: Undefined Security Weakness
Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querystring parameter in the HTTP GET request...
Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/128/info Wwwcount count.cgi is a very popular CGI program used to track website usage. In particular, it enumerates the number of hits on given webpages and increments them on a 'counter'. In October of 1997 two remotely exploitable problems were...