Cross site scripting

Cross-site scripting XSS vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2006-0246

Cross-site scripting XSS vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2006-0246: Undefined Security Weakness

Cross-site scripting XSS vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

RedKernel Referrer Tracker 1.1.0-3 - Rkrt_stats.php Cross-Site Scripting

RedKernel Referrer Tracker 1.1.0-3 - Rkrtstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16266/info Referrer Tracker is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

[SA18472] Widexl Download Tracker "ID" Parameter Cross-Site Scripting

TITLE: Widexl Download Tracker "ID" Parameter Cross-Site Scripting SECUNIA ADVISORY ID: SA18472 VERIFY ADVISORY: http://secunia.com/advisories/18472/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Widexl Download Tracker 1.x http://secunia.com/product/6830/...

[SA18473] RedKernel Referrer Tracker "rkrt_stats.php" Cross-Site Scripting

TITLE: RedKernel Referrer Tracker "rkrtstats.php" Cross-Site Scripting SECUNIA ADVISORY ID: SA18473 VERIFY ADVISORY: http://secunia.com/advisories/18473/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: RedKernel Referrer Tracker 1.x http://secunia.com/product/682...

Mantis Bug Tracker 0.x/1.0 - 'View_filters_page.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15842/info Mantis is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Mantis Bug Tracker 0.19.21.0 - Bug_sponsorship_list_view_inc.php File Inclusion

Mantis Bug Tracker 0.19.21.0 - Bugsponsorshiplistviewinc.php File Inclusion source: https://www.securityfocus.com/bid/15212/info Mantis is prone to a remote and local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacke...

Mantis Bug Tracker 0.19.2/1.0 - 'Bug_sponsorship_list_view_inc.php' File Inclusion

source: https://www.securityfocus.com/bid/15212/info Mantis is prone to a remote and local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote and local PHP code on a...

BNBT EasyTracker Malformed GET Request Remote DoS

The remote host is running BNBT EasyTracker, a packaged BitTorrent Tracker Installer for Windows. The remote version of BNBT EasyTracker fails to properly handle malformed HTTP requests, making it prone to denial of service attacks. An attacker can crash the application by sending a request with ...

vBulletin 3.0.8 - Accessible Database Backup Searcher (3)

/ Needed to pentest a few vBulletin forums so I wrote this junk real quick. Reference: http://securitytracker.com/alerts/2005/Aug/1014805.html Good paths: /forum/ / /forum/archive/ /forum/cpadmin/ Update 1: Code error fixes. /str0ke [email protected] Update 2: Fixed datestring-version for...

Mantis Bug Tracker 0.x1.0 - Multiple Input Validation Vulnerabilities

Mantis Bug Tracker 0.x1.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/14604/info Mantis is prone to multiple input validation vulnerabilities. These issues involve cross-site scripting, HTML injection and variable poisoning, and are due to a failure in th...

Mantis Bug Tracker 0.x/1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/14604/info Mantis is prone to multiple input validation vulnerabilities. These issues involve cross-site scripting, HTML injection and variable poisoning, and are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...

CVE-2004-1860

CVE-2004-1860 concerns a buffer overflow in Check Point SmartDashboard for Check Point NG AI R54/R55. The overflow can be triggered by a large filter on a column when using SmartView Tracker, allowing remote authenticated users to cause a denial of service (server disconnect) and potentially exec...

CVE-2004-1860

Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service server disconnect and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker...

CVE-2004-2029

BNBT BitTorrent Tracker, Beta 7.5 Release 2 and earlier, is affected by a vulnerability in Util_DecodeHTTPAuth where a remote attacker can trigger a crash (denial of service) by sending a crafted HTTP Basic Authorization header containing the value "A==". No remediation details are provided in th...

CVE-2004-2029: Undefined Security Weakness

The UtilDecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service crash via a Basic Authorization HTTP request with a "A==" value...

CVE-2004-1860: Undefined Security Weakness

Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service server disconnect and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker...

Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Sentinel LM 7.x UDP License Service Remote Buffer Overflow Exploit ================================================================== / SentinelLM, UDP License Service Stack...

TorrentTrader download.php id Parameter SQL Injection

The remote host is running TorrentTrader, a web-based BitTorrent tracker. The remote version of this software is vulnerable to a SQL injection attack that may allow an attacker to inject arbitrary SQL statements in the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...