4857 matches found
CVE-2006-2509: Undefined Security Weakness
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2510: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...
Yourfreeworld.com Short Url & Url Tracker Script
This is the second script I've tested from these people. It will be assumed for right now that all of their scripts contain full path disclosure errors as well as XSS'ing Yourfreeworld.com Short Url & Url Tracker Script Homepage: http://www.yourfreeworld.com/script/shorturl.asp Short Url Service...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
Design/Logic Flaw
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...
CVE-2006-2169: Undefined Security Weakness
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
Cross site scripting
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
CVE-2006-1673 affects Dark_Wizard vBug Tracker, specifically the vbugs.php component in version 3.5.1 and earlier. The vulnerability arises from lack of proper input handling in the sortorder parameter, enabling a remote attacker to inject arbitrary web script or HTML (XSS). Exploitation details,...
CVE-2006-1673: Undefined Security Weakness
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
vBulletin 3.5.x vBug Tracker XSS vuln.
vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...
Mantis Bug Tracker 0.x1.0 - manage_user_page.php?sort Cross-Site Scripting
Mantis Bug Tracker 0.x1.0 - manageuserpage.php?sort Cross-Site Scripting source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure ...
Mantis Bug Tracker 0.x/1.0 - 'manage_user_page.php?sort' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
ReadNotify Email Tracker (Client) Detection
Binary data 3410.prm...