12 matches found
Revive Adserver Information Disclosure Vulnerability
Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from an...
EUVD-2005-3017
Malware in sbrugna...
EUVD-2008-7007
Malware in sbrugna...
Exploit for Uncontrolled Resource Consumption in Digitaldruid Hoteldruid
CVE-2025-44203 HotelDruid 3.0.0 / 3.0.7 Sensitive Information...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2019-04686)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. A cross-site scripting vulnerability exists in the build of SQL-ERR messages in the includes/database.php file of ZoneMinder versions prior to 1.32.3, which can be exploited b...
DEBIAN-CVE-2019-8425
includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages...
CVE-2008-7048
Multiple cross-site scripting XSS vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 txtUsername parameter to registerDo.asp, as invoked from register.asp, or 2 txtRoomName parameter to roomnew.asp. NOTE: these issues might be resultant from...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 txtUsername parameter to registerDo.asp, as invoked from register.asp, or 2 txtRoomName parameter to roomnew.asp. NOTE: these issues might be resultant from...
CVE-2008-7048
Multiple cross-site scripting XSS vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 txtUsername parameter to registerDo.asp, as invoked from register.asp, or 2 txtRoomName parameter to roomnew.asp. NOTE: these issues might be resultant from...
CVE-2008-7048
CVE-2008-7048 concerns NatterChat 1.12 with multiple XSS vulnerabilities (and related SQL injection concerns in some descriptions). The OpenVAS entries confirm vulnerabilities in NatterChat, including XSS and SQLi vectors, specifically via the txtUsername parameter to registerDo.asp (triggered fr...
CVE-2005-3017
The CVE-2005-3017 entry concerns a PHP file inclusion vulnerability in Content2Web 1.0.1. A remote attacker can influence the show parameter in index.php to include arbitrary files, with resulting errors that can disclose paths, trigger SQL errors, and enable cross-site scripting (XSS). This vuln...
CVE-2005-3017
PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting XSS...