CVE-2006-6626: Undefined Security Weakness

Cross-site scripting XSS vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from...

Microsoft Internet Explorer Frame Src拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理Frame src存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交类似如下的页面，诱使用户打开，可导致应用程序崩溃： html frameset rows="1000%" frame src="?" /html Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2...

CVE-2006-6310

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

CVE-2006-6310: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

Spaminator <= 1.7 (page) Remote File Include Vulnerability

No description provided by source. Spaminator 1.7. $page Remote File Include CreW: ToXiC BuG Found By Drago84 SourcE CodE: http://freshmeat.net/redir/spaminator/16281/urltgz/spaminator-1.7.tar.gz Page Affect is: /src/Login.php Problem is include "$page.php"; Path : Declare $page ExpL:...

CVE-2006-6277

Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary files via a .. dot dot in the src parameter, a different vector than CVE-2005-3086...

CVE-2006-6277: Undefined Security Weakness

Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary files via a .. dot dot in the src parameter, a different vector than CVE-2005-3086...

CVE-2006-6236: Undefined Security Weakness

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the 1 src, 2 setPageMode, 3 setLayoutMode, and 4 setNamedDest methods in an AcroPDF ActiveX control, a different set of vector...

CVE-2006-6086: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in src/arkinc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfgpearpath parameter...

CVE-2006-5657: Undefined Security Weakness

Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors...

CVE-2006-5656: Undefined Security Weakness

Memory leak in the pushalign function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service memory consumption via unspecified vectors related to the tmpalign variable. NOTE: it is not clear whether this is a vulnerability, due to the functionality of the...

CVE-2006-5518: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler Rhode Island RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECTROOT parameter to 1 xml2rss.php, 2 configlocal.php, 3 rssonate.php, and 4 sql2xml.php in Src/getFeed/inc/...

PT-2006-5778 · Matrix · Matrix

Name of the Vulnerable Software and Affected Versions: Matrix versions after 3.8 Description: The issue allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq content src parameter. This can be used to access arbitrary sites with the server's IP...

CVE-2003-1305

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

CVE-2003-1305: Undefined Security Weakness

Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...

CVE-2006-4357: Undefined Security Weakness

PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the src parameter...

CVE-2006-3665

SquirrelMail 1.4.6 and earlier, with registerglobals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this...

CVE-2006-3665: Undefined Security Weakness

SquirrelMail 1.4.6 and earlier, with registerglobals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this...

CVE-2006-3538

Multiple cross-site scripting XSS vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the 1 "Your name" field and 2 "Enter Prayer Request here" field...

CVE-2006-3539: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 Subject and 2 Message fields in a do=write aka Send Mail Message action ...