2777 matches found
CVE-2008-2335
The CVE-2008-2335 entry describes a cross-site scripting (XSS) vulnerability in Vastal I-Tech phpVID 1.1 and 1.2 (also reported for 1.2.3) where an attacker can inject arbitrary script/HTML via the query parameter in search_results.php. Affected software: phpVID 1.1, 1.2 (and 1.2.3 per notes). Th...
Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...
Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
Vastal I-Tech Software Zone - cat_id SQL Injection
Vastal I-Tech Software Zone - catid SQL Injection --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...
Unfixed XSS vulnerability at www.techmahindra.com
Security researcher UnknownFromHell, has submitted on 27/10/2007 a cross-site-scripting XSS vulnerability affecting www.techmahindra.com, which at the time of submission ranked 159334 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. ...
Unfixed XSS vulnerability at www.wen-tech.com
Security researcher St@R-gaZ3r, has submitted on 10/11/2007 a cross-site-scripting XSS vulnerability affecting www.wen-tech.com, which at the time of submission ranked 8493409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...
CVE-2007-3622
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service crash via malformed messages...
CVE-2006-6973: Undefined Security Weakness
Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, which allows remote attackers to 1 reinstall the application via a direct request for install/index.php; 2 delete the database via a do=deletedatabase QUERYSTRI...
[DDSi-SA] XSS in Raindance Communications Web Conferencing Pro
-= DDSi Security Advisory =- March 24, 2006 ---------------------------------------------------------------- Vendor: Raindance Communications, Inc. Raindance offers audio and web conferencing solutions for more effective web meetings. Integrated web, audio and internet video conferencing makes...
CVE-2005-4050
Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol SIP packet...
CVE-2005-4050
CVE-2005-4050 describes a buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08. The vulnerability arises from processing a long SIP INVITE field, allowing a remote attacker to execute arbitrary code. Affected product family: MultiVOIP devices (vendor: Multi-T...
CVE-2005-4050
Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol SIP packet...
CVE-2005-4050: Undefined Security Weakness
Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol SIP packet...
OASYS Lite 1.0 "search.asp" XSS vuln.
OASYS Lite 1.0 "search.asp" XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/oasys-lite-10-searchasp-xss-vuln.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/oasyslite/ affected vesion: 1.0 and pri...
Crack disc encryption: the DVD of the blockbuster copy to the hard-vulnerability warning-the black bar safety net
A few years ago VCD legitimate popular, we will often VCD, Mpegav directory under the file copy directly to the hard disk, so not only can reduce drive wear and tear, but also to ensure the VCD of smooth playback. Now, when we play a DVD movie when the DVD drive is more busy, if you can spend som...
citypostXSS.txt
sNKenjoi's Security Advisory: XSS Vunerabilities in Multiple CityPost Software Security Advisory: XSS Vunerabilities in Multiple CityPost Software Severity: Medium Title: XSS Vunerabilities in Simple PHP Upload, Simple Image Editor and Automated Link Exchange Vendor: Allen Kim Vendor Website:...
CVE-2002-1629
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...
CVE-2002-1629
CVE-2002-1629 affects multiple MultiTech ProxyServer models (MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, MTPSR3-200). The issue is caused by a default/null password on the remote administration account (supervisor), allowing remote attackers to gain administrative privileges via Telnet or H...
CVE-2002-1629: Undefined Security Weakness
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...
