HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...

HLstats 1.34 - 'hlstats.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other...

HLstats 1.34 - hlstats.php Cross-Site Scripting

HLstats 1.34 - hlstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based...

MidiRecord2 MidiRecord.CC - Local Buffer Overflow

MidiRecord2 MidiRecord.CC - Local Buffer Overflow // source: https://www.securityfocus.com/bid/19190/info Midirecord is prone to a local buffer-overflow vulnerability because it fails to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker can...

Mozilla Firefox Javascript navigator Object Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Mozilla Firefox web browser. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The flaw exists when assigning specific values to the...

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service

Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service source: https://www.securityfocus.com/bid/18900/info Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data...

Invision Power Board (IP.Board) 1.x/2.x - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18836/info Invision Power Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker ...

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before...

Woltlab Burning Board 1.2/2.0/2.3 - 'report.php?postid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Woltlab Burning Board 1.2/2.0/2.3 - 'showmods.php?boardid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Woltlab Burning Board 1.2/2.0/2.3 - 'newthread.php?boardid' SQL Injection

source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. A successful exploit could allow an attacker...

Lotus Domino Src and BaseTarget XSS

The remote host runs Lotus Domino web server which is vulnerable to multiple cross-site scripting due to a lack of sanitization of user-supplied data. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Pubcookie application server modules contain cross-site scripting vulnerabilities

Overview Cross-site scripting vulnerabilities in the Pubcookie application server modules could allow a remote attacker to gain access to sensitive information. Description Pubcookie is a software package that provides intra-institutional single-sign-on authentication for end-users over the web...

Zoo 2.10 - Parse.c Local Buffer Overflow

Zoo 2.10 - Parse.c Local Buffer Overflow source: https://www.securityfocus.com/bid/17126/info Zoo is prone to a local buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An...

Zoo 2.10 - Parse.c Local Buffer Overflow

source: https://www.securityfocus.com/bid/17126/info Zoo is prone to a local buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker can exploit this issue to execute...

Archangel Weblog 0.90.2 - Authentication Bypass

source: https://www.securityfocus.com/bid/16848/info Archangel Weblog is prone to an authentication-bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authentication mechanism and gain...

Archangel Weblog 0.90.2 - Authentication Bypass

Archangel Weblog 0.90.2 - Authentication Bypass source: https://www.securityfocus.com/bid/16848/info Archangel Weblog is prone to an authentication-bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue t...

eyeOS 0.8.x - Session Remote Command Execution

eyeOS 0.8.x - Session Remote Command Execution source: https://www.securityfocus.com/bid/16537/info The eyeOS system is prone to a remote command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data. An attacker can exploit this issue ...

DSA-942-1 albatross - design error

Bulletin has no description...

Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow

source: https://www.securityfocus.com/bid/16212/info Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers. An attacker may be able to exploit this issue to...