CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4529

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs...

CVE-2009-4535

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

iSubscribe.v1.0 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : iSubscribe.v1.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

WHMCompleteSolution Cross Site Scripting

======================================================================================== | Title : WHMCompleteSolution Cross Site Scripting in URI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | |...

WHMCompleteSolution XSS in URI Vulnerability

No description provided by source. ======================================================================================== | Title : WHMCompleteSolution Cross Site Scripting in URI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...

CVE-2009-4363

CVE-2009-4363 affects Horde Framework components (Text_Filter/lib/Horde/Text/Filter/Xss.php) and related Horde Groupware packages, where data: URIs in HTML email HREF attributes could trigger cross-site scripting. Root cause is improper handling of data: URIs; vendor notes issue tied to Firefox. ...

Lighttpd URI Rewrite-Redirect信息泄漏漏洞

No description provided by source...

CVE-2009-4321

Zen Cart CVE-2009-4321 affects extras/curltest.php in Zen Cart 1.3.8/1.3.8a (and possibly other versions), allowing remote attackers to read arbitrary local files via a file:// URI. The root cause cited is insufficient sanitization of user-supplied data, enabling information disclosure through th...

Zeecareers 2.0 - Cross-Site Scripting Authentication Bypass

Zeecareers 2.0 - Cross-Site Scripting Authentication Bypass source: https://www.securityfocus.com/bid/41689/info Zeecareers is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage the cross-site scripting issue to execute...

phpldapadmin Local File Inclusion

Exploit for unknown platform in category web applications ================================= phpldapadmin Local File Inclusion ================================= PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin i...

phpldapadmin Local File Inclusion

No description provided by source. PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server."...

phpLDAPadmin - Local File Inclusion

phpLDAPadmin - Local File Inclusion PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server."...

phpLDAPadmin - Local File Inclusion

PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server." http://phpldapadmin.sourceforge.net vulnerable...

Apple Safari 'CSS' Buffer Overflow Vulnerability (Dec 2009) - Windows

Apple Safari Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 =...

VLC Media Player 1.0.3 smb:// Stack Overflow

!/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 = "\n" header1 += "\n" header1 +=...

VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC ==================================================================== Title: VLC Media Player 1.0.3 smb:// UR...

VideoLAN VLC Media Player 1.0.3 - 'smb://' URI Handling Remote Stack Overflow (PoC)

!/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 = "\n" header1 += "\n" header1 +=...

CVE-2009-4186

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...