Invision Power Board (IP.Board) 1.3 - Pop Cross-Site Scripting

Invision Power Board IP.Board 1.3 - Pop Cross-Site Scripting source: https://www.securityfocus.com/bid/9822/info It has been reported that Invision Power Board may be prone to a cross-site scripting vulnerability. This may allow a remote attacker to cause hostile HTML or script code to be rendere...

1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow (PoC)

1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/9794/info 1st Class Mail Server has been reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient boundary checks performed o...

1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/9794/info 1st Class Mail Server has been reported prone to a remote buffer overflow vulnerability. The issue exists due to a lack of sufficient boundary checks performed on user-supplied data. A remote attacker may pass excessive data as an argument for a...

JShop E-Commerce Suite xSearch Cross-Site Scripting Vulnerability

JShop E-Commerce Suite xSearch Cross-Site Scripting Vulnerability. CVE-2004-2084. Webapps exploit for php platform source: http://www.securityfocus.com/bid/9609/info A vulnerability has been reported to exist in JShop E-Commerce that may allow a remote user to execute HTML or script code in a...

ZH2004-04SA (security advisory): Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro

ZH2004-04SA security advisory: Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro Published: 04 february 2004 Released: 04 february 2004 Name: ReviewPost PHP Pro Affected Systems: current and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs -...

ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability

ZH2004-03SA security advisory: Photopost PHP Pro 4.6 Sql Injection Vulnerability Published: 02 february 2004 Released: 02 february 2004 Name: Photopost PHP Pro Affected Systems: 4.6 and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected]...

Psychoblogger PB-beta1 - desc Cross-Site Scripting

Psychoblogger PB-beta1 - desc Cross-Site Scripting source: https://www.securityfocus.com/bid/9293/info It has been reported that Psychoblogger may be prone to multiple cross-site scripting vulnerabilities that may allow a remote attacker to execute HTML or script code in a user's browser. The...

iSoft-Solutions QuikStore Shopping Cart 2.12 - template Directory Traversal

iSoft-Solutions QuikStore Shopping Cart 2.12 - template Directory Traversal source: https://www.securityfocus.com/bid/9283/info It has been reported that QuikStore Shopping Cart may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root...

iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure

iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure source: https://www.securityfocus.com/bid/9282/info It has been reported that QuikStore Shopping Cart may be prone to an information disclosure vulnerability due to insufficient sanitization of user-supplied data through th...

osCommerce 2.2 - manufacturers_id Cross-Site Scripting

osCommerce 2.2 - manufacturersid Cross-Site Scripting source: https://www.securityfocus.com/bid/9277/info A vulnerability has been reported to exist in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of...

PostMaster 3.163.17 Proxy Service - Cross-Site Scripting

PostMaster 3.163.17 Proxy Service - Cross-Site Scripting source: https://www.securityfocus.com/bid/9055/info PostMaster has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization that is performed by the proxy service on...

Justin Hagstrom Auto Directory Index 1.2.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9056/info It has been reported that Auto Directory Index is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'dir' parameter, which will then be included in a...

OpenAutoClassifieds 1.0 - 'Listing' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8972/info It has been reported that OpenAutoClassifieds is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'listings' parameter. The problem may allow a remote...

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8956/info It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' parameter. The problem may allow a remote attacker to execute...

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8956/info It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' paramete...

BEA WebLogic 678 - InteractiveQuery.jsp Cross-Site Scripting

BEA WebLogic 678 - InteractiveQuery.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/8938/info It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient...

BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/8938/info It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data in an initialization argument...

Mini SQL 1.01.3 - Remote Format String

Mini SQL 1.01.3 - Remote Format String // source: https://www.securityfocus.com/bid/8295/info Mini SQL mSQL has been reported prone to a remotely exploitable format string vulnerability, when handling user-supplied data. Reportedly a remote attacker may send malicious format specifiers to trigger...

Microsoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow

source: https://www.securityfocus.com/bid/8114/info rundll32.exe has been reported prone to a buffer overflow vulnerability. The condition has been reported to be triggered when an excessive string is passed to the vulnerable application as a routine name for a module. Exploitation of this issue...

Zblast 1.2 - 'Username' Local Buffer Overrun

// source: https://www.securityfocus.com/bid/7836/info A vulnerability has been reported for zblast, an svgalib-based game. The problem occurs when copying data from a user-supplied environment variable into a static memory buffer. By storing excessive data within the variable, it may be possible...