10425 matches found
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2005-1331
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters su...
CVE-2005-1331
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters su...
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2005-1337
Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:// URI...
CVE-2005-1331
CVE-2005-1331 concerns the AppleScript Editor in Mac OS X 10.3.9, where AppleScript: URI handling fails to display the intended code, potentially allowing a remote attacker to persuade the user to run malicious code via URI characters like NULL or control characters. The connected sources corrobo...
Invision Board Multiple XSS and SQL Injection
Binary data 2879.prm...
[Full-disclosure] Advisories for 4 vulnerabilities addressed by Apple SU 2005-005
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have published advisories for 4 security vulnerabilities in Mac OS X that were addressed by Apple Security Update 2005-005, released today. http://docs.info.apple.com/article.html?artnum=301528. This email contains brief summaries of the problems...
Oracle Application Server 9i Webcache - Arbitrary File Corruption
Oracle Application Server 9i Webcache - Arbitrary File Corruption source: https://www.securityfocus.com/bid/13420/info Oracle Application Server 9i Webcache is prone to an arbitrary file corruption vulnerability. The issue exists becaue dangerous characters are not removed from a certain paramete...
PHPCart - Input Validation
source: https://www.securityfocus.com/bid/13406/info PHPCart is prone to a remote input validation vulnerability. The issue exists because the software fails to sufficiently sanitize URI parameter data that is employed when computing product charges. A remote attacker may exploit this issue to...
CityPost PHP Image Editor M3 URI Parameter Cross-Site Scripting Vulnerability
CityPost PHP Image Editor M3 URI Parameter Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/13258/info CityPost Image Cropper/Resizer is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application...
[NEWS] GNU oSIP URI Parsing Heap Overflows
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
PHP Photo Album < 2.0.14 Multiple Vulnerabilities
Binary data 2821.prm...
PostNuke < 0.760 RC4 Multiple XSS and SQL Injection Vulnerabilities
Binary data 2808.prm...
PHP-Nuke 6.x7.x Downloads Module - Lid Cross-Site Scripting
PHP-Nuke 6.x7.x Downloads Module - Lid Cross-Site Scripting source: https://www.securityfocus.com/bid/13011/info It is reported that the PHP-Nuke 'Downloads' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize...
Tkais Shoutbox - Query Open Redirection
Tkais Shoutbox - Query Open Redirection source: https://www.securityfocus.com/bid/12914/info Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter o...
Tkai's Shoutbox - 'Query' Open Redirection
source: https://www.securityfocus.com/bid/12914/info Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter of a link. A successful attack may result...
XMB Forum < 1.9.8 SQL Injection and XSS Vulnerabilities
Binary data 2747.prm...