Palm WebOS 1.01.1 - Email Arbitrary Script Injection

Palm WebOS 1.01.1 - Email Arbitrary Script Injection source: https://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue ...

PT-2009-5775 · Pc Security +1 · Pc Security +1

Name of the Vulnerable Software and Affected Versions: TrustPort Antivirus versions prior to 2.8.0.2266 PC Security versions prior to 2.0.0.1291 Description: The issue allows local users to gain privileges by replacing executables with Trojan horse programs due to weak permissions Everyone: Full...

Adobe Flash Patch Guidance Working, Kinda

Mozilla’s move to nudge Firefox users into updating the browser’s Flash Player plug-in has been a phenomenal success with about 10 million users clicking through to the Web page with Adobe’s patch. Mozilla released some brief statistics to track the success of its new program, which serves up a...

PaoBacheca 2.1 - index.php URI Cross-Site Scripting

PaoBacheca 2.1 - index.php URI Cross-Site Scripting source: https://www.securityfocus.com/bid/42423/info PaoBacheca is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scrip...

Beex - 'news.php?navaction' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42451/info Beex is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with CMailServer ActiveX Control and is prone to Multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcmailserveractivexmultbofvuln.nasl 3898 2009-08-19 12:45:380Z aug CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors:...

Sun Java SE Unspecified Vulnerability In JDK/JRE/SDK - Aug09

This host is installed with Sun Java JDK/JRE/SDK and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavaseunspecifiedvulnaug09.nasl 7699 2017-11-08 12:10:34Z santu $ Sun Java SE Unspecified Vulnerability In JDK/JRE/SDK - Aug09 Authors: Sharath S Copyright: Copyright c...

[RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution

Advisory: Papoo CMS: Authenticated Arbitrary Code Execution The Papoo CMS allows authenticated users to upload GIF, JPG and PNG images if they have the "upload images" privilege, which is true for all default groups that can access the administrative interface. The CMS checks the uploaded images...

Kaspersky AntiVirus and Internet Security Unspecified Vulnerability

Kaspersky AntiVirus or Internet Security is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

Exploit for unknown platform in category local exploits ================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit 2 ================================================================== + Vulnerability : .mpf File Local Stack...

PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Original discover author banner PhpLive 3.2.1/2 x Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN...

PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHP Live! 3.2.1/2 x Remote Blind SQL Injection Exploit ======================================================== !/usr/bin/perl Original discover author banner PhpLive 3.2.1/2 x Blind...

WordPress / WordPress MU Multiple Vulnerabilities (Jul 2009)

WordPress / WordPress MU is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Web Browser 'Refresh' Header XSS Vulnerabilities - Linux

Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2009-4810 · Phpmyblockchecker · Phpmyblockchecker

Name of the Vulnerable Software and Affected Versions: phpMyBlockchecker version 1.0.0055 Description: The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the PHPMYBCAdmin cookie to LOGGEDIN. Recommendations: For phpMyBlockchecker...

ClamAV < 0.94 LZH File Unpacking DoS Vulnerability - Windows

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username...

Online Grades Attendance 3.2.6 - Blind SQL Injection

Online Grades Attendance 3.2.6 - Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Dokuwiki 2009-02-14 - Local File Inclusion

Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload config file $preload =...

OpenJDK: Possibility of trusted applet run in older, vulnerable version of JRE (6706490)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490...