5186 matches found
CVE-2006-3230
Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-3230
Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-3230
CVE-2006-3230 describes a cross-site scripting (XSS) vulnerability in index.tmpl of Azureus Tracker (Java BitTorrent Client Tracker) versions 2.4.0.2 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry provides the affected softwar...
CVE-2006-3230: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-2509
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2510
Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...
CVE-2006-2509
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2509
The CVE-2006-2509 entry concerns YourFreeWorld.com Short Url & Url Tracker Script. The vulnerable component is login.php, where the id parameter allows SQL injection, enabling remote attackers to execute arbitrary SQL commands. The available references describe the issue as a SQL injection affect...
CVE-2006-2510
CVE-2006-2510 is an XSS vulnerability in the URL submission form of YourFreeWorld.com Short Url & Url Tracker Script. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified URL submission form. The connected documents do not provide explicit product version, e...
CVE-2006-2509: Undefined Security Weakness
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2510: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs...
Yourfreeworld.com Short Url & Url Tracker Script
This is the second script I've tested from these people. It will be assumed for right now that all of their scripts contain full path disclosure errors as well as XSS'ing Yourfreeworld.com Short Url & Url Tracker Script Homepage: http://www.yourfreeworld.com/script/shorturl.asp Short Url Service...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
Design/Logic Flaw
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169
CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...
CVE-2006-2169
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
CVE-2006-2169: Undefined Security Weakness
RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...
Cross site scripting
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...