Miniweb 2.0 - 'historymonth' SQL Injection

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...

CVE-2008-1175

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2008-1174

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter to aspAdmin/deleteUser.asp, a different vector than CVE-2008-1174. NOTE: the provenance of this information is unknown; the details are obtaine...

CVE-2008-1175

AuthentiX 6.3b1 Trial is affected by an XSS in the deleteUser.asp path (username parameter) that can inject script/HTML. The CVE-2008-1175 entry aligns with Red Hat documentation describing the same issue as a cross-site scripting vulnerability in AuthentiX 6.3b1 Trial, with a vector distinct fro...

CVE-2008-1174

CVE-2008-1174 concerns an XSS vulnerability in AuthentiX 6.3b1 Trial, specifically in editUser.asp where the username parameter can be exploited to inject arbitrary web script or HTML. The associated connected documents also note a related CVE-2008-1175 affecting aspAdmin/deleteUser.asp (a differ...

CVE-2008-1174

Cross-site scripting XSS vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the username parameter...

With SockOnline software easily break the port restriction-vulnerability warning-the black bar safety net

Fiis divided into the Sock, HTTP, FTP, and other types, respectively suitable for different applications. However, sometimes the network is only open 8 0 port for HTTP web browsing. Faced with this situation, we must do nothing? Of course not, in SockOnline this special agent software help, we ca...

JVN#50495547 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user. Impact An attacker could...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

Code injection

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

CVE-2007-1199

CVE-2007-1199 describes a vulnerability in Adobe Reader/Acrobat where a PDF containing a file:// URI can cause a remote attacker to read arbitrary files, as demonstrated with URI(file:///C:/). The issue is distinct from CVE-2007-0045. The NVD entry lists a MEDIUM impact with network attack vector...

CVE-2004-1523

Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service application crash via format string specifiers in a message...

CVE-2004-1523

CVE-2004-1523 describes a format-string vulnerability in the game console of Hired Team: Trial 2.0 and earlier and 2.200. The flaw allows remote attackers to trigger a denial of service (application crash) by supplying format string specifiers in a message. Affected software is the Hired Team gam...

CVE-2004-1525

CVE-2004-1525 affects Hired Team software (Trial 2.0 and earlier and 2.200). The vulnerability allows remote attackers to cause an application crash (denial of service) via the status command. Attack vector is network, with no authentication required and low attack complexity; impact is partial l...

CVE-2004-1526

CVE-2004-1526 affects Hired Team: Trial 2.0 and earlier and 2.200; the description indicates no restriction on kicking other players, including administrators, on the game server. Root cause: missing or misconfigured access control that allows arbitrary kicks. Impact: potential disruption of serv...

CVE-2004-1524

CVE-2004-1524 affects Hired Team: Trial 2.0 and earlier and 2.200. The issue is triggered by a malformed UDP packet sent to a game port (e.g., 29200), causing a denial of service (game interruption). The framed information in the connected records confirms the affected software and the network-ba...