7054 matches found
CVE-2007-3827
Mozilla Firefox allows for cookies to be set with a null domain aka "domainless cookies", which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window...
Design/Logic Flaw
Mozilla Firefox allows for cookies to be set with a null domain aka "domainless cookies", which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window...
CVE-2007-3827
Mozilla Firefox allows for cookies to be set with a null domain aka "domainless cookies", which allows remote attackers to pass information between arbitrary domains and track user activity, as demonstrated by the domain attribute in the document.cookie variable in a javascript: window...
CVE-2007-3827
Mozilla Firefox is affected by CVE-2007-3827: cookies can be set with a null domain (domainless cookies), enabling information to pass between arbitrary domains and potential user tracking via document.cookie in javascript:. window. The vulnerability stems from how cookies are handled with a null...
hacker Start-vulnerability warning-the black bar safety net
Don't know the name of the article. As far as I know, a lot of people to learn hacking techniques from how to get into others system start, the Processor collects a variety of exploits, backdoors, Trojans, etc. However,my earliest learning was not these,but this time I want to talk about:hacking,...
MSIE7 entrapment again (+ FF tidbit)
Hello again, Microsoft Internet Explorer seems to have a soft spot for browser entrapment vulnerabilities. Just to recap, in these attacks, the user is made believe he had left a webpage and the URL bar or SSL state data reinforce him in this belief - but in reality, is prevented from doing so, a...
Sql injection
SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...
CVE-2007-3638
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization...
nf}_conntrack_sctp: remotely triggerable NULL ptr dereference
The sctpnew function in 1 ipconntrackprotosctp.c and 2 nfconntrackprotosctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference...
Sql injection
SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter...
SQL-Injection in IP-TRACKING Mod for phpBB2.0.x
Information: The IP-Tracking Mod is a Extension for phpBB2.0.x which logs all Page hits the user of the Boards do including Referer, IP and Username. It contains a SQL-Injection on Admin-Level. You can get it from: http://www.phpbb.de/viewtopic.php?t=63690&postdays=0&postorder=asc&start=0 Steps t...
CVE-2007-2858
SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...
Sql injection
SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...
CVE-2007-2858
CVE-2007-2858 describes an SQL injection in the IP-Search function of the IP-Tracking Mod for phpBB 2.0.x. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands through the Search Query field. The provided documents confirm the affected software/module and...
CVE-2007-2858
SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...
Break the SQL error message upload webshell-vulnerability warning-the black bar safety net
GiveSQL injectionpoint,the first thought is the BACKUP WEBSHELL,throw in a NB run in a circle,found that shielding the SQL error information,not the physical path,that also write a PP mA. To associate a permission is not very high command of openrowset,cross-database the Server query,is to put a...
iptrack-sql.txt
Information: The IP-Tracking Mod is a Extension for phpBB2.0.x which logs all Page hits the user of the Boards do including Referer, IP and Username. It contains a SQL-Injection on Admin-Level. You can get it from: http://www.phpbb.de/viewtopic.php?t=63690&postdays=0&postorder=asc&start=0 Steps t...
[Full-disclosure] SQL-Injection in IP-TRACKING Mod for phpBB2.0.x
Information: The IP-Tracking Mod is a Extension for phpBB2.0.x which logs all Page hits the user of the Boards do including Referer, IP and Username. It contains a SQL-Injection on Admin-Level. You can get it from: http://www.phpbb.de/viewtopic.php?t=63690&postdays=0&postorder=asc&start=0 Steps t...
Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...
[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability
----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...