2777 matches found
CVE-2009-3197
CVE-2009-3197 describes a cross-site scripting (XSS) vulnerability in the PHP Calendars Script by JCE-Tech, specifically in search.php. The flaw lets remote attackers inject arbitrary web script or HTML by supplying a crafted value to the search parameter. The NVD metrics indicate a MEDIUM-severi...
CVE-2009-3195
CVE-2009-3195 affects JCE-Tech Auction RSS Content Script 3.0 with multiple XSS vulnerabilities that allow remote injection of arbitrary script/HTML via the id parameter to rss.php and search.php. The description specifies client-side impact (arbitrary script injection) but does not provide in-do...
CVE-2009-3194
Cross-site scripting (XSS) vulnerability identified as CVE-2009-3194 affects the JCE-Tech SearchFeed Script’s index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. Public references in the NVD entry indicate an XSS with a base score of 4.3 (...
CVE-2009-3198
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3198: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3197: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3194: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3196: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter...
CVE-2009-3195: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
KesionCMS(section news)upload vulnerability-vulnerability warning-the black bar safety net
Prius special A bit tasteless,with a few days before the publication of the iis6 filename parsing vulnerability achieve to obtain webshell. First find the use of tech-ex systems site,registered members,and then input KSeditor/selectupfiles. asp, Open after upload x. asp;x. jpg format image file,i...
JCE-Tech PHP Video Script - index.php Cross-Site Scripting
JCE-Tech PHP Video Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execut...
JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...
New Mobile Malware Transmitter.C Spreading
From Zero Day Dancho Danchev Researchers from NetQin Tech. are reporting on a newly discovered mobile malware variant Transmitter.C distributed through a modified version of legitimate mobile application. Upon execution, the malware attempts to automatically spread by SMS-ing hundreds of messages...
How to break the Xbox 360 security model
This Google Tech Talk features Michael Steil and Felix Domke discussing the security model of the Microsoft Xbox 360 and how to break it...
Can someone be too connected?
There are those that would argue U.S. House Representative Pete Hoekstra is too connected. According to a recent article in a top security trade publication, Rep. Hoekstra sent tweets during his recent trip to Iraq. Some of the tweets included: “Just landed in Baghdad. I believe it may be first...
Spam, phishing and online scams: A network view
In this Google Tech Talk, Nick Feamster, an assistant professor at Georgia Tech, dives into the murky world of phishing and online scams as they relate to the epidemic of spam...
