3872 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contentsnew operation in the adcontents section...
CVE-2007-0191
CVE-2007-0191 describes a Cross-site Scripting (XSS) vulnerability in MKPortal, specifically in admin.php during a contents_new operation in the ad_contents section. The issue arises from two fields used in that operation, allowing remote attackers to inject arbitrary script/HTML. Available refer...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...
Bandwebsite 1.5 - LOGIN Remote Add Admin
Bandwebsite 1.5 - LOGIN Remote Add Admin Name: Pass: milw0rm.com 2006-12-16...
Bandwebsite 1.5 - 'LOGIN' Remote Add Admin
Name: Pass: milw0rm.com 2006-12-16...
Bandsite portal system Admin Added Access
!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...
CVE-2006-5856
Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
CVE-2006-6297
CVE-2006-6297 affects KDE kdegraphics components, notably the kdegraphics-kfile-plugins (kfile_jpeg) used by Konqueror, digiKam and other KDE image viewers. The issue is a stack consumption/stack overflow vulnerability in the kfile_jpeg EXIF handling that can trigger a denial of service via a cra...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
CVE-2006-6297: Undefined Security Weakness
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
oscommerce-xss.txt
Oscommerce Multiple XSS in admin section. Vendor url:Http://www.oscommerce.com Advisore:http://lostmon.blogspot.com/2006/11/ oscommerce-multiple-xss-in-admin.html Vendor notify:YES Exploit available: YES osCommerce contains a flaw that allows a remote cross site scripting attack.This flaw exists...
PT-2006-6422 · Atutor · Atutor
Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...
Windows kernel GDI structures privilege escalation
It's possible to remap read-only share memory section in write mode...
OpenBSD 2.x - 3.3 exec_ibcs2_coff_prep_zmagic() Kernel Exploit
No description provided by source. / OpenBSD 2.x - 3.3 / / execibcs2coffprepzmagic kernel stack overflow / / note: ibcs2 binary compatibility with SCO and ISC is enabled / / in the default install / / Copyright Feb 26 2003 Sinan "noir" Eren / / noir olympos org | noir uberhax0r net / / greets to...
CVE-2006-5318: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...
FreeBSD : phpbb -- NULL byte injection vulnerability (86526ba4-53c8-11db-8f1a-000a48049292)
Secunia reports : ShAnKaR has discovered a vulnerability in phpBB, which can be exploited by malicious users to compromise a vulnerable system. Input passed to the 'avatarpath' parameter in admin/adminboard.php is not properly sanitised before being used as a configuration variable to store avata...
