Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were foun...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

RHEL 4 : Firefox (RHSA-2007:0079)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007 Packages for Red Hat Enterprise Linux 4 have been...

Critical: Red Hat Security Advisory: Firefox security update

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Cross site scripting

Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are obtained from third party information...

CVE-2007-0706

Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are...

Cross site scripting

Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are...

CVE-2007-0705

Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are obtained from third party information...

CVE-2007-0705

CVE-2007-0705 affects Sleipnir 2.49 and earlier and Portable Sleipnir 2.45 and earlier. The vulnerability arises from RSS data handling in Sleipnir’s RSS bar, allowing a cross-zone scripting attack that bypasses Web content zone restrictions and could cause arbitrary script execution in an inappr...

CVE-2007-0706

Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are...

Sql injection

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter...

swcms.php.txt

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

Simple Web Content Management System - SQL Injection

!/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit; $xpl-agent"Mozilla"; if$proxh $xpl-proxy$proxh; if$proxa...

Simple Web Content Management System - SQL Injection

Simple Web Content Management System - SQL Injection !/usr/bin/php Options.......: Example.......: php xpl.txt http://hihi.org/ /etc/passwd --------------------------------------------------------\n"; exit1; $url =$argv1;$file =$argv2; $proxh=$argv3;$proxa=$argv4; $xpl = new phpsploit;...

Simple Web Content Management System Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================================== Simple Web Content Management System Remote SQL Injection Exploit ================================================================= !/usr/bin/php Options.......:...

Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities

Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities source: https://www.securityfocus.com/bid/21686/info Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote...

Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities

source: https://www.securityfocus.com/bid/21686/info Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit these vulnerabilities to influence or misrepresent how web content ...

AY Systems Web Content System远程文件包含漏洞

AY Systems Web Content System是一款基于PHP的WEB内容管理程序。 AY Systems Web Content System不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'main.php'脚本对用户提交的'pathShowProcessHandle'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 AY System Solutions Web Content System 2.6 http://www.aysad.net/...

QuestCMS (main.php) Remote File Include Vulnerability

No description provided by source. !!!!!!!!!WWW.SERSAVASCAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author:...