CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

NQcontent V3 XSS vuln.

NQcontent V3 XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html vendor:http://www.nqcontent.com/ affected version:V3 Professional Edition,V3 Enterprise Edition,V3 Comparison Matrix. Product Description: NQcontent ...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...

Baseline CMS vuln.

Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...

WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting

WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

CVE-2005-3348

CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...

CVE-2005-3348

HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter...

PHPWCMS - Directory traversal vulnerability,CSS attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Author: Stefan Lochbihler Date: 14. November 2005 Software: PHPWCMS Version: 1.2.5-DEV URL: http://www.phpwcms.de Attack: Directory traversal vulnerability,CSS about: phpwcms is an Open Source web content management system. It is optimized for fast an...

XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection

11.04 12/11/2005 1XOOPS 2.2.3 Final arbitrary local inclusion 2XOOPS WF-Downloads module v 2.05 SQL Injection / Administrative credentials disclousre / Remote commands execution software: site: http://www.xoops.org/ description: "XOOPS is an extensible, OO Object Oriented, easy to use dynamic web...

iCMS Remote File Include Vulnerability

iCMS Remote File Include Vulnerability Author: r0t hackers.by.lv Date: 14. nov 2005 software:iCMS vendor:http://www.cogilent.com/ software description: iCMS is an interactive Web Content Management System. The purpose of this product is to facilitate organizations that require power solutions to...

PHP Handicapper - Process_signup.php HTTP Response Splitting

PHP Handicapper - Processsignup.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15301/info PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker...

CVE-2004-2506

CVE-2004-2506 affects WIKINDX prior to 0.9.9g. The vulnerability is an unparsed web content delivery flaw that allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file. The available sources describe the impact as information disclosure (partial con...

CVE-2004-2506

Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file...

CVE-2004-2512

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...