Unfixed XSS vulnerability at www.equipmenttrader.nl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.equipmenttrader.nl, which at the time of submission ranked 5125603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It...

Unfixed XSS vulnerability at www.truckworld.pl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.truckworld.pl, which at the time of submission ranked 2014416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at direct.formas.se

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting direct.formas.se, which at the time of submission ranked 2378829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.trucks-de.eu

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.trucks-de.eu, which at the time of submission ranked 977389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.webhost4life.com

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.webhost4life.com, which at the time of submission ranked 16660 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

CVE-2007-1192 affects HyperBook Guestbook 1.30. The issue is improper access control: sensitive data is stored under the web root, enabling a remote attacker to directly download the admin password hash from data/gbconfiguration.dat. This constraint is evidenced across multiple sources in the con...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

Unfixed XSS vulnerability at www.w-hotspots.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.papasotiriou.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.papasotiriou.gr, which at the time of submission ranked 50005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Buffer overflow

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

Unfixed XSS vulnerability at www.vres.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.vres.gr, which at the time of submission ranked 32854 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.hnms.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hnms.gr, which at the time of submission ranked 68928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

CVE-2006-6597: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe...