OoApp Guestbook XSS vuln.

OoApp Guestbook XSS vuln. Vuln. discovered by : r0t Date: 30 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ooapp-guestbook-xss-vuln.html vendor:http://www.ooapp.com/ affected version:2.1 and prior Product Description: This is a free php based guestbook for your web site. Easy to...

CVE-2005-4550

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

CVE-2005-4550

CVE-2005-4550 affects the PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter that can contain a trailing null byte (%00). This is caused ...

CVE-2005-4550: Undefined Security Weakness

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

oracle Application server discussion forum portlet - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/16048/info Oracle Application Server Discussion Forum Portlet is affected by multiple remote vulnerabilities. The following specific vulnerabilities were identified: The application is prone to a cross-site scripting vulnerability. Discussion Forum Portle...

oracle Application server discussion forum portlet - Multiple Vulnerabilities

oracle Application server discussion forum portlet - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/16048/info Oracle Application Server Discussion Forum Portlet is affected by multiple remote vulnerabilities. The following specific vulnerabilities were identified: The...

CVE-2005-4473

Unspecified vulnerability in Macromedia JRun 4 web server JWS allows remote attackers to view web application source code via "a malformed URL."...

CVE-2005-4473: Undefined Security Weakness

Unspecified vulnerability in Macromedia JRun 4 web server JWS allows remote attackers to view web application source code via "a malformed URL."...

CVE-2005-4473

Unspecified vulnerability in Macromedia JRun 4 web server JWS allows remote attackers to view web application source code via "a malformed URL."...

WebDB SQL inj vuln.

WebDB SQL inj vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/webdb-sql-inj-vuln.html vendor:http://www.loissoftware.com affected version:1.1 and prior Product Description: WebDB is the totally generic, instant online database system - It is...

WANDSOFT e-SEARCH XSS vuln.

WANDSOFT e-SEARCH XSS vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/wandsoft-e-search-xss-vuln.html vendor:http://www.wandsoft.com/products/ affected version:latest and its also used as search module for WANDSOFT e-Suite 4 and prior. Produ...

Macromedia JRun Application Server platform multiple vulnerabilities

Source code leak, Web server DoS...

CVE-2005-4473

CVE-2005-4473 concerns Macromedia JRun 4 web server (JWS). The public description states an unspecified vulnerability that enables remote attackers to view web application source code via a malformed URL. This is the only concrete detail provided across linked records; no version-specific impact,...

Papoo Multiple SQL vuln.

Papoo Multiple SQL vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/papoo-multiple-sql-vuln.html vendor:http://www.papoo.org/ affected version:2.1.2 and prior Product Description: Papoo ist an easy to use, accessible CMS. It respects for...

RAMSite R|1 CMS XSS vuln.

RAMSite R|1 CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html vendor:http://ramsiter1.imikalsen.com/ affected version:1.0 and prior Product Description: The RAMSite R|1 CMS is an advanced, yet easy to use a...

Speartek XSS vuln.

Speartek XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/speartek-xss-vuln.html vednor:http://www.speartek.com affected version:6.0 and prior Product Description: SpearTek's advanced solutions help you optimize the Internet channel to fu...

IntranetApp XSS vuln.

IntranetApp XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/intranetapp-xss-vuln.html vendor:www.aspapp.com/content.asp?contentid=322 affected version:3.3 and prior Product Description: IntranetApp gets groups on the same page with tools...

SiteEnable XSS vuln.

SiteEnable XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/siteenable-xss-vuln.html vendor:http://www.siteenable.com/ affected version:3.3 and prior Product Description: SiteEnable is an open source Web application that combines content...

OpenCms XSS vuln.

OpenCms XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/opencms-xss-vuln.html vendor:http://www.opencms.org/ affected version:6.0.3 and prior Product Description: OpenCms is a professional level Open Source Website Content Management...

Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass

Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass Author: Attila Gerendi Darkz Date: December 20, 2005 Package: Enterprise Connector http://www.enterpriseheart.com/site/modules/mydownloads/ Versions Affected: 1.02 Other versions may also be affected. Severity: SQL Injectio...