Netquery 4.0 - NQUser.php Cross-Site Scripting

Netquery 4.0 - NQUser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20837/info Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

CVE-2006-5508

Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via 1 the n parameter and 2 the User-Agent HTTP header...

Abidia OAnywhere认证信息泄露漏洞

OAnywhere是运行在移动设备上用于在eBay上进行拍卖的工具。 OAnywhere在处理用户名和口令的传输时存在漏洞，攻击者可能通过嗅探攻击获取认证信息。 OAnywhere的更新请求会通过简单的HTTP POST包含认证。在这个过程中eBay的用户名/口令信息是通过明文发送的，这就可能导致帐号信息的暴露。 Abidia OAnywhere 厂商补丁： Abidia ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.abidia.com/products/oanywhere POST...

PowerMovieList 0.13/0.14 - Edit User HTML Injection

source: https://www.securityfocus.com/bid/20564/info PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the...

CVE-2006-5227

Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...

CVE-2006-5227

Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...

torrentflux -- User-Agent XSS Vulnerability

Steven Roddis reports that User-Agent string is not properly escaped when handled by torrentflux. This allows for arbitrary code insertion...

CVE-2006-4451

Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...

CVE-2006-4451

Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...

CVE-2006-4430

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

MercuryBoard <= 1.1.4 (User-Agent) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== MercuryBoard 4.1 allowing subs not working for me, so I wrote my version vulnerability is actually unpatched... / if $argc3 printr'...

Proxy / Firewall Detection Via User-Agent

Binary data 3715.prm...

CVE-2006-3950

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2006-3950

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

sipXtapi INVITE Message CSeq Field Header Remote Overflow

The remote host is running a SIP user agent that appears to be compiled using a version of SIP Foundry's SipXtapi library before March 24, 2006. Such versions contain a buffer overflow flaw that is triggered when processing a specially crafted packet with a long value for the 'CSeq' field. A remo...

EJ3 TOPo 2.2 (descripcion) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; us...

Ultimate PHP Board 1.96 GOLD - Multiple Vulnerabilities

"; $ikey = ordsubstr$key, $i, 1; // print $i."ikey:".$ikey.""; $itext = ordsubstr$text, $i, 1...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

Cross site scripting

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558

IpLogger vulnerable to cross-site scripting (XSS) in versions 1.7 and earlier. The issue arises from unfiltered User-Agent header content being written to log files and later rendered/viewed, enabling arbitrary HTML/script injection. Documented impact aligns with partial confidentiality and integ...