WHMCompleteSolution XSS in URI Vulnerability

No description provided by source. ======================================================================================== | Title : WHMCompleteSolution Cross Site Scripting in URI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...

CVE-2009-4363

CVE-2009-4363 affects Horde Framework components (Text_Filter/lib/Horde/Text/Filter/Xss.php) and related Horde Groupware packages, where data: URIs in HTML email HREF attributes could trigger cross-site scripting. Root cause is improper handling of data: URIs; vendor notes issue tied to Firefox. ...

Lighttpd URI Rewrite-Redirect信息泄漏漏洞

No description provided by source...

CVE-2009-4321

Zen Cart CVE-2009-4321 affects extras/curltest.php in Zen Cart 1.3.8/1.3.8a (and possibly other versions), allowing remote attackers to read arbitrary local files via a file:// URI. The root cause cited is insufficient sanitization of user-supplied data, enabling information disclosure through th...

Zeecareers 2.0 - Cross-Site Scripting Authentication Bypass

Zeecareers 2.0 - Cross-Site Scripting Authentication Bypass source: https://www.securityfocus.com/bid/41689/info Zeecareers is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage the cross-site scripting issue to execute...

phpldapadmin Local File Inclusion

Exploit for unknown platform in category web applications ================================= phpldapadmin Local File Inclusion ================================= PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin i...

phpldapadmin Local File Inclusion

No description provided by source. PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server."...

phpLDAPadmin - Local File Inclusion

phpLDAPadmin - Local File Inclusion PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server."...

phpLDAPadmin - Local File Inclusion

PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server." http://phpldapadmin.sourceforge.net vulnerable...

Apple Safari 'CSS' Buffer Overflow Vulnerability (Dec 2009) - Windows

Apple Safari Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC

No description provided by source. !/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 =...

VLC Media Player 1.0.3 smb:// Stack Overflow

!/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 = "\n" header1 += "\n" header1 +=...

VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC ==================================================================== Title: VLC Media Player 1.0.3 smb:// UR...

VideoLAN VLC Media Player 1.0.3 - 'smb://' URI Handling Remote Stack Overflow (PoC)

!/usr/bin/env python VLC Media Player 1.0.3 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows 7 Download: http://www.videolan.org Note: Open the .xspf file. It looks like nothing happens but close VLC you will get a crash header1 = "\n" header1 += "\n" header1 +=...

CVE-2009-4186

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...

CVE-2009-4157

Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...

CVE-2009-4157

Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...

Joomla! Component ProofReader 1.0 RC6 - Cross-Site Scripting

Joomla! Component ProofReader 1.0 RC6 - Cross-Site Scripting The Joomla! ProofReader component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Joomla ProofReader Component 1.0 RC6 Cross-Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla ProofReader Component 1.0 RC6 Cross-Site Scripting Vulnerability ======================================================================= The Joomla! ProofReader...

SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SHTTPD %q Th...