5186 matches found
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
CVE-2006-1673 affects Dark_Wizard vBug Tracker, specifically the vbugs.php component in version 3.5.1 and earlier. The vulnerability arises from lack of proper input handling in the sortorder parameter, enabling a remote attacker to inject arbitrary web script or HTML (XSS). Exploitation details,...
vBulletin 3.5.x vBug Tracker XSS vuln.
vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...
CVE-2006-1673: Undefined Security Weakness
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
Mantis Bug Tracker 0.x1.0 - manage_user_page.php?sort Cross-Site Scripting
Mantis Bug Tracker 0.x1.0 - manageuserpage.php?sort Cross-Site Scripting source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure ...
Mantis Bug Tracker 0.x/1.0 - 'manage_user_page.php?sort' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
DidTheyReadIt Email Tracker (Client) Detection
Binary data 3409.prm...
ReadNotify Email Tracker Application Detection
Binary data 3414.prm...
pointofmail Email Tracker Application Detection
Binary data 3413.prm...
DidTheyReadIt Email Tracker Application Detection
Binary data 3412.prm...
ReadNotify Email Tracker (Client) Detection
Binary data 3410.prm...
PointOfMail Email Tracker (Client) Detection
Binary data 3411.prm...
git content tracker buffer overflow
Buffer overflow on oversized symbolic link name...
CVE-2006-0317
Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...
Cross site scripting
Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...
CVE-2006-0317
Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...
CVE-2006-0317
The CVE-2006-0317 entry describes a Cross-site scripting (XSS) vulnerability in RedKernel Referrer Tracker 1.1.0-3, specifically in rkrt_stats.php. The issue arises when a query string value supplied via GET is stored in the $QUERY_STRING variable, allowing remote attackers to inject arbitrary we...
CVE-2006-0317: Undefined Security Weakness
Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...
CVE-2006-0246
Cross-site scripting XSS vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter...
CVE-2006-0246
CVE-2006-0246 is an XSS vulnerability in Widexl Download Tracker 1.06, specifically in down.pl. The issue allows remote attackers to inject arbitrary web script or HTML via the ID parameter, enabling inline script execution in the context of the affected application. The provided data notes a MED...