597 matches found
Debian Security Advisory DSA 223-1 (geneweb)
The remote host is missing an update to geneweb announced via advisory DSA 223-1. OpenVAS Vulnerability Test $Id: deb2231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 223-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2007-3417
Multiple cross-site scripting XSS vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the 1 processsearch or 2...
Progress WebSpeed 3.0/3.1 - Denial of Service
//source: https://www.securityfocus.com/bid/23778/info // //WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. // //Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate...
Wordpress <= v2.1.0
If you're logged in into wordpress as an admin, your comments aren't properly sanitized, thus allowing an XSS to be posted. This can be exploited using XSRF techniques. More info & PoC: http://www.virtuax.be/advisories/Advisory4-20022007.txt...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...
mxBB Module kb_mods <= 2.0.2 Remote Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= mxBB Module kbmods \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...
mxBB Module kb_mods 2.0.2 - Remote File Inclusion
| \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-= Knowledgebase kbmods...
WikiNi-xss.txt
Hi, I've found 2 XSS vulns in WikiNi. The programmers have been contacted and the vulns addressed in version 0.4.4. The name parameter of page wakka.php is not properly sanitized: "alert'XSS Vulnerable';" The email parameter of page wakka.php is not properly sanitized: "alert'XSS Vulnerable';"...
Osprey <= 1.0 GetRecord.php Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= Osprey = 1.0 GetRecord.php Remote File Include Vulnerability =============================================================...
net2ftp.txt
+-------------------------------------------------------------------- + + net2ftp: a web based FTP client : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: net2ftp: a web based FTP client + Venedor ...........:...
PHPSelect Web Development - 'index.php3' Remote File Inclusion
source: https://www.securityfocus.com/bid/20231/info PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affect...
Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String
source: https://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing function. Exploiting this issue allows...
MyBace Light (hauptverzeichniss) Remote File Inclusion
+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...
sicherheit_83.txt
+-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2.5 + Venedor ...........:...
cwfm091.txt
+-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...
CVE-2006-4199
Cross-site scripting XSS vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page, a different vulnerability than CVE-2004-1512...
phpAutoMembersArea 3.2.5 - installed_config_file Remote File Inclusion
phpAutoMembersArea 3.2.5 - installedconfigfile Remote File Inclusion +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected...
MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability
+-------------------------------------------------------------------- + + MyNewsGroups : v. 0.6b = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: MyNewsGroups : v. 0.6b + Venedor ...........: http://mynewsgroups.sourceforge.n...
CVE-2006-3841
Cross-site scripting XSS vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScara...
Directory traversal
Absolute path directory traversal vulnerability in a MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and b VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the 1 language parameter in...