PT-2026-50548

Public exploit code has been released for four Linux kernel vulnerabilities, each allowing a local user to escalate privileges to root. While kernel maintainers have patched all four over the past few weeks, the public availability of working exploits means any unpatched system is now at immediat...

EUVD-2006-2989

Malware in sbrugna...

EUVD-2006-2990

Malware in sbrugna...

Orkut Scrapbook Forced Logout

Hello, There is a small bug in orkut scrapbook that if any one sends a scrp containing the following code Then the recipient will logout automatically from the orkut. Same thing occurred to me while I was browsing and mail was sent to me from my friend Nikhil and In case same thing occurs with yo...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

SchoolCenter URL Handling Cross Site Scripting Vulnerability

SchoolCenter URL Handling Cross Site Scripting Vulnerability A vulnerability has been identified in SchoolCenter Software, which could be exploited to conduct cross site scripting attacks. Attackers can run arbitrary code that can be executed by the user's browser in the security context of an...

CVE-2006-3033

Cross-site scripting XSS vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages...

CVE-2006-3033

CVE-2006-3033 describes a cross-site scripting (XSS) vulnerability in MyScrapbook 3.1 . The issue allows remote attackers to inject arbitrary web script or HTML via the input box on the file singlepage.php when submitting scrapbook pages. The NVD entry records a CVSS v2 base score of 4.3 (Medium)...

CVE-2006-2992

Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...

CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

CVE-2006-2993

CVE-2006-2993 affects My Photo Scrapbook 1.0 and earlier. The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the value of the key parameter in two pages: Displayview.asp and Details_Photo_bv.asp. The connected documents do ...

CVE-2006-2992

CVE-2006-2992 describes a cross-site scripting (XSS) vulnerability in the page display.asp of My Photo Scrapbook 1.0 and earlier, where an attacker can inject arbitrary web script or HTML via the key_m parameter. The affected software is My Photo Scrapbook 1.0 and earlier; the underlying cause is...

CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

CVE-2006-2992: Undefined Security Weakness

Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...

CVE-2006-2993: Undefined Security Weakness

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...