Cross site scripting

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0794

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Information disclosure

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0794

CVE-2006-0794 affects V-webmail 1.6.2 via help.php, where remote attackers can obtain the installation path through unspecified invalid parameters. The available documents describe a path-disclosure issue but do not provide detailed root-cause analysis, exploited vectors, or concrete mitigation s...

CVE-2006-0793

CVE-2006-0793 concerns V-webmail 1.6.2. The vulnerability is in frameset.php, where a remote attacker can trigger phishing by supplying arbitrary websites in the rframe parameter. The exploit details and exact impact are described only as phishing via rframe; no further root-cause specifics or af...

CVE-2006-0794

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

CVE-2006-0792 : The vulnerability affects V-webmail 1.6.2 in the page preferences.personal.php where the newid parameter can be exploited to inject arbitrary web script or HTML (reflected XSS). This is a client-side script injection issue that could allow an attacker to execute JavaScript in the ...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[SA18776] V-webmail Cross-Site Scripting and Path Disclosure

TITLE: V-webmail Cross-Site Scripting and Path Disclosure SECUNIA ADVISORY ID: SA18776 VERIFY ADVISORY: http://secunia.com/advisories/18776/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: V-webmail 1.x...

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these...

V-Webmail 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16706/info V-webmail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

CVE-2004-2629

CVE-2004-2629 describes multiple vulnerabilities in the H.323 protocol implementation used by First Virtual Communications Click to Meet Express (and related products) that allow remote attackers to cause denial of service, demonstrated via the H.225 protocol test suite (PROTOS). The affected com...

Zina SQL injection vulnerability.

Zina SQL injection vulnerability. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zina-sql-injection-vulnerability.html Vendor:http://www.pancake.org/zina/ affected version: Zina v.0.12.07 and prior. Vuln. description: Input passed to the "p"...

Oracle 9i Application Server SOAP Default Configuration Vulnerability - Active Check

In a default installation of Oracle 9i Application Server AS v.1.0.2.2, it is possible to deploy or undeploy SOAP services without the need of any kind of credentials. SPDX-FileCopyrightText: 2003 Javier Fernandez-Sanguino Some text descriptions might be excerpted from a referenced sources, and a...

POP3 Server type and version

This detects the POP3 Server SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10185";...

Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt3

Oct. 11, 2005 Dmitry V. Levin 0.9.7g-alt3 - Applied upstream fix for potential SSL 2.0 rollback during SSL handshake CAN-2005-2969...

Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?

Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...

USN-157-1: Mozilla Thunderbird vulnerabilities

Vladimir V. Perepelitsa discovered a bug in Thunderbird's handling of anonymous functions during regular expression string replacement. A malicious HTML email could exploit this to capture a random block of client memory. CAN-2005-0989 Georgi Guninski discovered that the types of certain XPInstal...

CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...