CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...

SAP Web Application Server 6.x7.0 - Open Redirection

SAP Web Application Server 6.x7.0 - Open Redirection source: https://www.securityfocus.com/bid/15362/info SAP Web Application Server is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through...

vBulletin XSS

The remote host is running vBulletin, a web based bulletin board system written in PHP. The remote version of this software is vulnerable to a cross-site scripting issue, due to a failure of the application to properly sanitize user-supplied URI input. As a result of this vulnerability, it is...

vBulletin < 2.3.6, 3.0.x < 3.0.6 XSS Vulnerability

vBulletin is vulnerable to a cross-site scripting XSS issue, due to a failure of the application to properly sanitize user-supplied URI input. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

vBulletin < 3.0.2 XSS Vulnerability

The remote version of vBulletin is vulnerable to a cross-site scripting XSS issue, due to a failure of the application to properly sanitize user-supplied URI input. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Skype URI handling routine contains a buffer overflow

Overview A buffer overflow in Skype may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. There is a buffer overflow in the routines that handle Skype-specific URIs callto:// or skype://. The buffer overflow may...

XSS vulnerability in Zeroblog

Software: ZeroBlog Vendor: http://www.sothq.net Version: 1.2a , 1.1f Bug: XSS Exploitation: Remote --------------------------- Introduction: Zeroblog: Feature ritch weblog, d-board, live webcam option, and requires 3th party software, calendar, poll system, photogallery, smileys, search engine, 8...

TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution

TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution source: https://www.securityfocus.com/bid/14960/info A remote command execution vulnerability affects the application. The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a comman...

CVE-2005-3077

Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service crash via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI...

Mozilla Firefox fails to properly sanitize user-supplied URIs via shell script

Overview A lack of input validation in a supplemental shell script included with some Mozilla browsers may allow a remote, unauthenticated attacker to execute arbitrary commands. Description The Linux versions of the Mozilla Firefox and Mozilla Suite web browsers include a wrapper shell script fo...

Possible memory corruption problems in Apple Safari

Hello, I was playing around with Safari the other day and noticed that it crashes solid if you convince it to visit: data://h1crash/h1 Typing it into the address bar is sufficient for testing and crashes the browser completely. I loaded up Safari in gdb to see where it crashes and got the followi...

Apple Safari 1.x2.0.1 - Data URI Memory Corruption

Apple Safari 1.x2.0.1 - Data URI Memory Corruption source: https://www.securityfocus.com/bid/14868/info Apple Safari is prone to a memory corruption vulnerability. This issue is exposed when the browser opens specific 'data:' URIs, causing the browser to crash. Though unconfirmed, this...

Apple Safari 1.x/2.0.1 - Data URI Memory Corruption

source: https://www.securityfocus.com/bid/14868/info Apple Safari is prone to a memory corruption vulnerability. This issue is exposed when the browser opens specific 'data:' URIs, causing the browser to crash. Though unconfirmed, this vulnerability could be exploitable to execute arbitrary code...

Mozilla-based browsers contain a buffer overflow in handling URIs containing a malformed IDN hostname

Overview A vulnerability in the way Mozilla products and derivative programs handle certain malformed URIs could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Mozilla products, including the Mozilla Suite, and Mozilla Firefox are vulnerable to a buffer...

Land Down Under < 802 events.php SQL Injection

Binary data 3209.prm...

Land Down Under <= 800 Multiple Vulnerabilities

The remote version of Land Down Under is prone to various SQL injection and cross-site scripting attacks provided PHP's 'magicquotes' setting is disabled due to its failure to sanitize the request URI before using it in 'system/functions.php' in the function 'ldulog'. A malicious user may be able...

Simple Machines Forum Avatar Information Disclosure Vulnerability

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The installed version of SMF on the remote host does not properly sanitize the URI supplied for the user avatar. An attacker who is registered in the affected application can exploit this fl...

Looking Glass 20040427 - Remote Command Execution

Looking Glass 20040427 - Remote Command Execution source: https://www.securityfocus.com/bid/14682/info Looking Glass may be exploited to execute arbitrary commands. An attacker can prefix arbitrary commands with the '|' character, supply them through a URI parameter and have them executed in the...