2836 matches found
CVE-2009-3196
The CVE-2009-3196 entry documents a cross-site scripting (XSS) vulnerability in the PHP Video Script by JCE-Tech, specifically in index.php, where an attacker can inject arbitrary web script or HTML via the key parameter. The affected component is the index.php of JCE-Tech PHP Video Script; root ...
CVE-2009-3198
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3196
Cross-site scripting XSS vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter...
CVE-2009-3196: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter...
CVE-2009-3197: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3195: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
CVE-2009-3194: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3198: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
KesionCMS(section news)upload vulnerability-vulnerability warning-the black bar safety net
Prius special A bit tasteless,with a few days before the publication of the iis6 filename parsing vulnerability achieve to obtain webshell. First find the use of tech-ex systems site,registered members,and then input KSeditor/selectupfiles. asp, Open after upload x. asp;x. jpg format image file,i...
JCE-Tech PHP Video Script - index.php Cross-Site Scripting
JCE-Tech PHP Video Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execut...
JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...
New Mobile Malware Transmitter.C Spreading
From Zero Day Dancho Danchev Researchers from NetQin Tech. are reporting on a newly discovered mobile malware variant Transmitter.C distributed through a modified version of legitimate mobile application. Upon execution, the malware attempts to automatically spread by SMS-ing hundreds of messages...
How to break the Xbox 360 security model
This Google Tech Talk features Michael Steil and Felix Domke discussing the security model of the Microsoft Xbox 360 and how to break it...
Can someone be too connected?
There are those that would argue U.S. House Representative Pete Hoekstra is too connected. According to a recent article in a top security trade publication, Rep. Hoekstra sent tweets during his recent trip to Iraq. Some of the tweets included: “Just landed in Baghdad. I believe it may be first...
Spam, phishing and online scams: A network view
In this Google Tech Talk, Nick Feamster, an assistant professor at Georgia Tech, dives into the murky world of phishing and online scams as they relate to the epidemic of spam...
The Virus Safe Computing Initiative from HP
This Google Tech Talk features Dr. Alan Karp of HP Labs, who details the company’s Virus Safe Computing Initiative...
