Microsoft Internet Explorer 'IFRAME' DoS Vulnerability (May 2010)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenForum 2.2 b005 - 'saveAsAttachment()' Method Arbitrary File Creation

source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create arbitrary files, which may then be executed to perform unauthorized...

Resin resin-admin/digest.php XSS

The remote host is running Resin, an application server. The 'resin-admin/digest.php' script included with the version of Resin listening on the remote host fails to sanitize user input to the 'digestrealm' and/or 'digestusername' parameters before using it to generate dynamic HTML output. An...

PostgreSQL 'RESET ALL' Unauthorized Access Vulnerability

PostgreSQL is prone to an unauthorized-access vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

U.S.Robotics USR5463 0.06 Firmware - setup_ddns.exe HTML Injection

U.S.Robotics USR5463 0.06 Firmware - setupddns.exe HTML Injection source: https://www.securityfocus.com/bid/40292/info U.S.Robotics USR5463 firmware is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...

NPDS REvolution 10.02 - 'admin.php' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40331/info NPDS Revolution is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to compromise the affected application, steal cookie-based authentication credentials, perform unauthorized actions, and disclose or modify...

Caucho Resin Professional 3.1.5 - resin-admindigest.php Multiple Cross-Site Scripting Vulnerabilities

Caucho Resin Professional 3.1.5 - resin-admindigest.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40251/info Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize...

Joomla! Component com_horses - id SQL Injection

Joomla! Component comhorses - id SQL Injection source: https://www.securityfocus.com/bid/40308/info The 'comhorses' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Component Percha Downloads Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Samba < 3.4.8, 3.5.x < 3.5.2 Multiple Remote DoS Vulnerabilities

Samba is prone to multiple remote denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ecoCMS 18.4.2010 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39901/info ecoCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

JForum 2.08 - BBCode Color Tag HTML Injection

source: https://www.securityfocus.com/bid/42414/info JForum is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the...

Hyplay 1.2.0326.1 - .asx Remote Denial of Service

Hyplay 1.2.0326.1 - .asx Remote Denial of Service source: https://www.securityfocus.com/bid/40048/info Hyplay is prone to a remote denial-of-service vulnerability. Attackers may leverage this issue to crash the affected application, denying service to legitimate users. Given the nature of this...

EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting

EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/40037/info EasyPublish CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/40037/info EasyPublish CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Advanced Poll 2.0 - 'mysql_host' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40045/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Gallo <= 0.1.0 RFI Vulnerability

Gallo is prone to a remote file include RFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openUrgence Vaccin Multiple Remote File Include Vulnerabilities

openUrgence Vaccin is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41132/info Cimy Counter for WordPress is prone to an HTTP response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scrip...

Billwerx RC5.2.2 PL2 - primary_number SQL Injection

Billwerx RC5.2.2 PL2 - primarynumber SQL Injection source: https://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...