MediaMonkey URI处理拒绝服务漏洞

BUGTRAQ ID: 30251 CNCAN ID：CNCAN-2008071701 MediaMonkey是一款功能强大的多媒体资料收藏管理软件。 MediaMonkey处理超长URI存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建包含恶意URL的文件，诱使MediaMonkey解析，可触发此漏洞。 Ventis Media MediaMonkey 3.0.3 目前没有解决方案提供： http://www.mediamonkey.com/...

Firefox 3.x < 3.0.1 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - By creating a very large number of references to a common CSS object, an attacker can overflow the CSS reference counter, causing a crash when the browser attempts to free the CSS object while still in use and allowing fo...

CVE-2008-3193

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Sql injection

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI...

Mozilla Firefox command line URI handling vulnerability

Overview Mozilla Firefox contains a vulnerability that may allow an attacker to bypass security restrictions by opening specially crafted URIs using the Firefox command line interface. Description Mozilla Firefox can process URIs from its command line interface that can be accessed by users or...

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the...

MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the application. Given the nature of these vulnerabilities, the attacker may also be abl...

BitComet 1.02 - URI Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/30255/info BitComet is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the application. Given the nature of this vulnerability, the attacker may also be able to execute arbitrary code, but this has not been confirme...

Claroline 1.8.9 - announcementsannouncements.php Cross-Site Scripting

Claroline 1.8.9 - announcementsannouncements.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may...

Claroline 1.8.9 - workwork.php Cross-Site Scripting

Claroline 1.8.9 - workwork.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these...

Claroline 1.8.9 - exerciseexercise.php Cross-Site Scripting

Claroline 1.8.9 - exerciseexercise.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage...

Claroline 1.8.9 - phpBBreply.php Cross-Site Scripting

Claroline 1.8.9 - phpBBreply.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these...

Claroline 1.8.9 - phpBBnewtopic.php Cross-Site Scripting

Claroline 1.8.9 - phpBBnewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage thes...

Claroline 1.8.9 - calendaragenda.php Cross-Site Scripting

Claroline 1.8.9 - calendaragenda.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage the...

Claroline 1.8.9 - groupgroup_space.php Cross-Site Scripting

Claroline 1.8.9 - groupgroupspace.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage...

Claroline 1.8.9 - clarolineredirector.php?url Arbitrary Site Redirect

Claroline 1.8.9 - clarolineredirector.php?url Arbitrary Site Redirect source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may...

Claroline 1.8.9 - 'calendar/agenda.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser ...

Claroline 1.8.9 - 'document/document.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser ...

Claroline 1.8.9 - 'work/work.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser ...

Claroline 1.8.9 - 'phpBB/reply.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser ...