WikkaWiki 1.1.6 - TextSearch.php Cross-Site Scripting

WikkaWiki 1.1.6 - TextSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15860/info WikkaWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

AppServ Open Project 2.5.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/15851/info AppServ Open Project is reportedly affected by a remote denial of service vulnerability. AppServ 2.5.3 running on Microsoft Windows platforms was reported to be vulnerable. Other versions may be affected as well. Xploit PoC AppServ 2.5.3 "Win32...

PHP Web Scripts Ad Manager Pro 2.0 - Advertiser_statistic.php SQL Injection

PHP Web Scripts Ad Manager Pro 2.0 - Advertiserstatistic.php SQL Injection source: https://www.securityfocus.com/bid/15847/info Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...

QuickPayPro 3.1 - design.php?delete SQL Injection

QuickPayPro 3.1 - design.php?delete SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow

Linux Kernel 2.6.x - INVALIDATEINODEPAGES2 Local Integer Overflow / source: https://www.securityfocus.com/bid/15846/info Linux kernel is prone to a local integer-overflow vulnerability. A successful attack can result in a kernel crash. Arbitrary code execution may be possible as well, but this ha...

LogiSphere 0.9.9 j - 'viewsource.jsp?source' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15807/info LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...

LogiSphere 0.9.9 j - 'Search?NS-query-pat' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15807/info LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...

BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading

BlackBoard Academic Suite 6.2.3.23 - Frameset.jsp Cross-Domain Frameset Loading source: https://www.securityfocus.com/bid/15814/info Blackboard Academic Suite is prone to a cross-domain frameset-loading vulnerability. Successful exploitation may result in various attacks, such as information...

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection source: https://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

Web4Future eDating Professional 5.0 - index.php Multiple SQL Injections

Web4Future eDating Professional 5.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input befor...

Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection

source: https://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

WSN Knowledge Base 1.2 - comments.php?id SQL Injection

WSN Knowledge Base 1.2 - comments.php?id SQL Injection source: https://www.securityfocus.com/bid/15656/info WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQ...

SoftBiz FAQ 1.1 - refer_friend.php?id SQL Injection

SoftBiz FAQ 1.1 - referfriend.php?id SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

SoftBiz B2B trading Marketplace Script 1.1 - 'products.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

SoftBiz FAQ 1.1 - 'index.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

88Scripts Event Calendar 2.0 - index.php SQL Injection

88Scripts Event Calendar 2.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

RSA SecurID Web Agent for IIS redirect buffer overflow

Added: 11/30/2005 CVE: CVE-2005-4734 BID: 26424 OSVDB: 20151 Background RSA SecurID Web Agent for IIS provides access control for IIS web servers using one-time authentication tokens. Problem A buffer overflow in IISWebAgentIF.dll could allow a remote attacker to execute arbitrary commands using ...