Ruby <= 1.9 (regex engine) Remote Socket Memory Leak Exploit

No description provided by source. ------------------------------------------------------- Language : Ruby Web Site: www.ruby-lang.org Platform: All Bug: Remote Socket Memory Leak Products Affected: 1.8 series: - 1.8.5 and all prior versions - 1.8.6-p286 and all prior versions - 1.8.7-p71 and all...

CVE-2008-3510

Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...

CVE-2008-3510

Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...

CVE-2008-3510

Crafty Syntax Live Help (CSLH) 2.14.6 has an XSS vulnerability in livehelp_js.php via the department parameter. The CVE-2008-3510 entry indicates remote, unauthenticated injection of script/HTML, with CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). No remediation details are provided in the c...

CVE-2008-3510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in livehelpjs.php in Crafty Syntax Live Help CSLH 2.14.6 allows remote attackers to inject arbitrary web script or HTML via the department parameter...

Crafty Syntax Live Help 2.14.6 - livehelp_js.php Cross-Site Scripting

Crafty Syntax Live Help 2.14.6 - livehelpjs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30543/info Crafty Syntax Live Help CSLH is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this...

Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30543/info Crafty Syntax Live Help CSLH is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

[SECURITY] Fedora 9 Update: pcre-7.3-4.fc9

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

syntaxcms-upload.txt

special THanks to EgiX For the Exploit Code author...: Stack mail.....: Ev!L descr: if the web site change the name of path or path is /public/ you can delet /public/ in the exploit in the line : "POST $pathpublic/fckeditor/editor/filemanager/upload/php/upload.php - vulnerable code in...

SyntaxCMS 1.3 - 'FCKeditor' Arbitrary File Upload

special THanks to EgiX For the Exploit Code author...: Stack mail.....: Ev!L descr: if the web site change the name of path or path is /public/ you can delet /public/ in the exploit in the line : "POST $pathpublic/fckeditor/editor/filemanager/upload/php/upload.php - vulnerable code in...

RunCMS 1.6.1 - msg_image SQL Injection

RunCMS 1.6.1 - msgimage SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...

CVE-2008-1183

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...

CVE-2008-1183: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...

CVE-2008-1183

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...

CVE-2008-1183

CVE-2008-1183 documents multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) prior to 2.14.6. The affected components are the web endpoints (livehelp.php, user_questions.php, leavemessage.php) where unspecified parameters can be exploited to inject script/HTML. Th...

Cross site scripting

Cross-site scripting XSS vulnerability in lostsheep.php in Crafty Syntax Live Help CSLH before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect...

CVE-2008-0848

Cross-site scripting XSS vulnerability in lostsheep.php in Crafty Syntax Live Help CSLH before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect...

CVE-2008-0848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lostsheep.php in Crafty Syntax Live Help CSLH before 2.14.16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the versions claimed by the original researcher are probably incorrect...