4460 matches found
Ultimate PHP Board chat/login.php username Parameter Script Injection
Binary data 3872.prm...
FreeBSD : drupal -- multiple XSS vulnerabilities (b2383758-5f15-11db-ae08-0008743bf21a)
The Drupal Team reports : A bug in input validation and lack of output validation allows HTML and script insertion on several pages. Drupal's XML parser passes unescaped data to watchdog under certain circumstances. A malicious user may execute an XSS attack via a specially crafted RSS feed. This...
Sipsak VOIP Vulnerability Scanner Detection (deprecated)
Binary data 3765.prm...
SiVus VOIP Vulnerability Scanner Detection (deprecated)
Binary data 3761.prm...
SquirrelMail < 1.4.8 Local File Inclusion
Binary data 3639.prm...
Resin < 3.0.19 Directory Traversal and Path Disclosure Vulnerabilities
Binary data 3621.prm...
PHP-Fusion < 6.00.307 Local File Inclusion
Binary data 3560.prm...
phpListPro Multiple Script returnpath Parameter Remote File Inclusions
The remote host is running phpListPro, a website voting/ranking tool written in PHP. The installed version of phpListPro fails to sanitize user input to the 'returnpath' parameter of the 'config.php', 'editsite.php', 'addsite.php', and 'in.php' scripts before using it to include PHP code from oth...
Listserv < 14.5 Multiple Buffer Overflows
Binary data 3458.prm...
MyBB < 1.04 misc.php SQLi
The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the comma variable via the 'comma' parameter in a cookie. If PHP's 'registerglobals' setting is enabled, a remote, unauthenticated attacker can...
GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...
Acunetix Web Vulnerability Scanner Detection
Binary data 3298.prm...
Buffer Overrun In HTML Converter Could Allow Code Execution (823559)
There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. This flaw causes a security vulnerability to exist. A specially crafted request to the HTML converter could cause the converter to fail in such a way that it could...
cybsecApps.txt
CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...
CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability
CYBSEC S.A. www.cybsec.com Advisory Name: Multiple Vendor Web Vulnerability Scanner Arbitrary ============= Script Injection Vulnerability Vulnerability Class: Script Injection ==================== Release Date: 09.01.2005 ============= Affected Applications: ====================== N-Stealth...
e107 0.6 forum_post.php create new topics in non-existing forums
Hello, The e107 is an open-source, PHP and SQL based portal and content management system1. The user Tron2 of my website3 has detected an issue in forumpost.php. If you want to create a new topic you will get to forumpost.php?nt.13 where an integer the id of the forum represents. Because there is...
CA BrightStor ARCserve Backup Auto Scanner / Exploiter
No description provided by source. / 02/20/2005 This is provided as proof-of-concept code only for educational purposes and testing by authorized individuals with permission to do so. exploit by : cybertronic cybertronicatgmxdotnet This exploits the following vulnerabilities: Computer Associates...
CA BrightStor ARCserve Backup - Remote Overflow
CA BrightStor ARCserve Backup - Remote Overflow / 02/20/2005 This is provided as proof-of-concept code only for educational purposes and testing by authorized individuals with permission to do so. exploit by : cybertronic cybertronicatgmxdotnet This exploits the following vulnerabilities: Compute...