UBBCentral UBB.Threads 6.2.3/6.5 - 'online.php?Cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11900/info It is reported that UBB.threads is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input prior to including it in dynamically generated web...

Shortcuts may insecurely store SMB authentication information

Overview SMB authentication information may be stored as plain text within URI shortcuts. As a result, a local attacker may be able read the authentication information and gain access to the share. Description SMB is a protocol for sharing data and resources between computers. Many operating...

Microsoft Internet Explorer 6 - Search Pane URI Obfuscation

Microsoft Internet Explorer 6 - Search Pane URI Obfuscation source: https://www.securityfocus.com/bid/11851/info A remote URI obfuscation vulnerability has been found in Internet Explorer's search pane functionality. This issue is due to a failure of the application to present the URI address of...

Microsoft Internet Explorer 6 - Search Pane URI Obfuscation

source: https://www.securityfocus.com/bid/11851/info A remote URI obfuscation vulnerability has been found in Internet Explorer's search pane functionality. This issue is due to a failure of the application to present the URI address of HTML and script code loaded into the search pane. This issue...

Blog Torrent 0.80 - BTDownload.php Cross-Site Scripting

Blog Torrent 0.80 - BTDownload.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11839/info It is reported that Blog Torrent is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...

Blog Torrent 0.80 - 'BTDownload.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11839/info It is reported that Blog Torrent is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a maliciou...

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to...

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution source: https://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application...

KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution

source: https://www.securityfocus.com/bid/11827/info KDE FTP kioslave-based applications such as Konqueror are reported prone to an arbitrary FTP server command execution vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to utilizi...

Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution

source: https://www.securityfocus.com/bid/11826/info Microsoft Internet Explorer is reported prone to an arbitrary FTP server command-execution vulnerability. This issue is due to the application's failure to properly sanitize user-supplied URI input before using it to execute FTP commands on...

Advanced Guestbook 2.22.3 - Cross-Site Scripting

Advanced Guestbook 2.22.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/11798/info It is reported that Advanced Guestbook is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...

Advanced Guestbook 2.2/2.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/11798/info It is reported that Advanced Guestbook is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a...

InShop and InMail - Cross-Site Scripting

InShop and InMail - Cross-Site Scripting source: https://www.securityfocus.com/bid/11758/info InMail and InShop are both reported susceptible to cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly sanitize user-supplied input prior to including ...

Zwiki 0.100.36.2 - Cross-Site Scripting

Zwiki 0.100.36.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/11745/info It is reported that Zwiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in...

KorWeblog 1.6.2 - Remote Directory Listing

source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing directory traversal sequences. When properly...

JSPWiki 2.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/11746/info It is reported that JSPWiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in dynamically generated Web pages. This...

Zwiki 0.10/0.36.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/11745/info It is reported that Zwiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in dynamic web page content. This issue could...

Van Dyke SecureCRT < 4.1.9 Telnet URI Remote Command Execution

Binary data 2427.prm...

Skype < 1.0.0.100 CallTo URI Buffer Remote Overflow

Binary data 2405.prm...

Mark Zuckerberg Thefacebook - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11676/info It is reported that Thefacebook is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to creat...