2487 matches found
CVE-2008-6087
Cross-site scripting XSS vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
4Site CMS 2.6 - Multiple SQL Injections
4Site CMS 2.6 - Multiple SQL Injections WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...
CVE-2009-0204
Cross-site scripting XSS vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Megacubo 5.0.7 (mega://) Remote eval() Injection Exploit
No description provided by source. !-- Megacubo 5.0.7 mega:// remote eval injection exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ tested against Internet Explorer 8 beta 2/xp sp 3 software site: http://www.megacubo.net/tv/ download url:...
Megacubo 5.0.7 - mega: Remote eval() Injection
Megacubo 5.0.7 - mega: Remote eval Injection pwn milw0rm.com 2008-12-30...
Megacubo 5.0.7 - 'mega://' Remote 'eval()' Injection
pwn milw0rm.com 2008-12-30...
Gentoo Security Advisory GLSA 200812-20 (phpcollab)
The remote host is missing updates announced in advisory GLSA 200812-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200812-20 (phpcollab)
The remote host is missing updates announced in advisory GLSA 200812-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
DEBIAN-CVE-2008-5249
Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-5330
Multiple cross-site scripting XSS vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATHIN...
Active Bids 3.5 (ItemID) Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Active Bids 3.5 ItemID Blind SQL Injection Vulnerability ========================================================== Tybe : Remote Blind SQL Injection Vulnerability Vendor :...
Web Calendar System <= 3.40 (XSS/SQL) Multiple Remote Vulnerabilities
No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...
Flash Player HTML injection flaw
Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...
XOOPS Module xhresim (index.php no) Remote SQL Injection Vuln
No description provided by source. XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code=...
CVE-2008-4536
Cross-site scripting XSS vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 BetaRC 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject...
CVE-2008-4485
Cross-site scripting XSS vulnerability in the ICAP patience page in Blue Coat Security Gateway OS SGOS 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2008-4196
Cross-site scripting XSS vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
DEBIAN-CVE-2008-3881
Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...
Server: multiple XSS issues
Multiple cross-site scripting XSS vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway DSGW web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject...
z-breaknews 2.0 - 'single.php' SQL Injection
z Name : z-breaknews 2.0 single.php Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, t0pP8uZz, 0in, suN8Hclf & All of my friends source of single.php : ... 4. @mysqlselectdb"$dbName"or die"Ãĺ ěîăó âűáđŕňü áŕçó äŕÃÃűő "...