2271 matches found
动网论坛(DVBBS)Show.asp页面过滤不严导致跨站漏洞
文件show.asp中： filetype=Request"filetype" //第75行 username=Request"username" …… TempStr = ReplaceTempStr,"$username",UserName //第244行 程序对于输出变量filetype和username过滤导致xss漏洞的产生。 DVBBS 8.0.0-8.2.0 厂商补丁 DVBBS ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dvbbs.net...
PT-2009-4245 · Ulteo · Ulteo Open Virtual Desktop
Name of the Vulnerable Software and Affected Versions: Ulteo Open Virtual Desktop version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several API endpoints, including...
Directory traversal
Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the show parameter...
CVE-2009-1624: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the show parameter...
DEW-NEWphpLinks 2.0 XSS / LFI
------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l...
Vulnerability showboating is for amateurs
It’s like one of those magic candles people place on birthday cakes that sparkle and relight themselves each time you think they’ve been blown out. That’s how I’d define the most recent ignition of the “bugs for cash” debate. By now you’ll have probably heard that Dino Dai Zovi, Charlie Miller an...
The Ryan & Roel Show Episode 9
Adobe vs. Microsoft on Security Response – Fri, March 6, 2009 Ryan and Roel discuss the latest zero-day vulnerabilities and attacks affecting Adobe and Microsoft customers and compare the response from the two software vendors. Download episode...
The Ryan & Roel Show Episode 8
The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...
The Ryan & Roel Show Episode 1
Welcome to the Show – Mon, October 20 2008 In this show, we introduce ourselves and recap the Virus Bulletin 2008 conference. We talk about the MBR Trojan bootkit, the controversy surrounding anti-virus testing standards, information on the blackmarket for online gaming passwords and some data fr...
Directory traversal
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...
SkyPortal Picture Manager 0.11 Contents Change Vulnerability
No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal Pictur...
biggboss2 SQL Injection
==================================================================== Website: http://biggboss2.in.com/ Category: TV Show Vulnerability: Inband SQL Injection Founder: Jaydeep [email protected] Date: 16th Feb, 2009 ==================================================================== == P O C...
mtvyouthicon.in.com SQL Injection
==================================================================== Website: http://mtvyouthicon.in.com/ Category: TV Show Reality Show - Online Voting Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...
Directory traversal
Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, in conjunction with a show action...
DEBIAN-CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...