7504 matches found
DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities
DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in...
BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities
BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19513/info Multiple cross-site scripting vulnerabilities affect BlaBla 4U because the application fails to properly sanitize user-supplied input before including it in dynamically generated web...
BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/19513/info Multiple cross-site scripting vulnerabilities affect BlaBla 4U because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage these issues to have...
YaBBSE 1.x - index.php Cross-Site Scripting
YaBBSE 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...
YaBBSE 1.x - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage this issue to have arbitrary script co...
QuestCMS - main.php Remote File Inclusion
QuestCMS - main.php Remote File Inclusion !!!!!!!!!WWW.SÝBERSAVASCÝLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability --------------------------------------------------------------------------------...
Questcms Remote File Include Vulnerability
!!!!!!!!!WWW.SBERSAVASCLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...
QuestCMS - 'main.php' Remote File Inclusion
!!!!!!!!!WWW.SÝBERSAVASCÝLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...
QuestCMS (main.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================== QuestCMS main.php Remote File Include Vulnerability ===================================================== Title : Questcms Remote File Include Vulnerability...
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Seamonkey is an open source Web browser, advanced email and...
Multiple vulnerabilities in OpenCMS
Multiple access control and input validation vulnerabilities in OpenCMS Open Source Website Content Management System 0. ORIGINAL ADVISORY http://o0o.nu/meder/OpenCMSmultiplevulnerabilities.txt I. BACKGROUND OpenCms is a professional level Open Source Website Content Management System. OpenCms...
Update Protection against Geeklog Remote Code Execution Vulnerability
Geeklog is a PHP/MySQL based application for managing dynamic web content. Geeklog CMS fails to validate multiple file extensions, potentially allowing a remote attacker to upload malicious script code, which will be executed in the context of the webserver process...
mvnForum activatemember Multiple Parameter XSS
The remote host is running mvnForum, an open source, forum application based on Java J2EE. The version of mvnForum installed on the remote host fails to sanitize user-supplied input to the 'activatecode' and 'member' parameters of the 'activatemember' script before using it to generate dynamic we...
"View Image" local resource linking (Windows) — Mozilla
Normally Mozilla-based clients prevent web content from linking to local files but Eric Foley reports a partial bypass of this restriction by using Windows filename syntax on a Windows computer rather than a file:/// URL as the SRC= attribute. The image will not be loaded on the web page--it will...
[KAPDA::#43] - phpwcms multiple vulnerabilities
Vendor: http://www.phpwcms.de Bugs: Path Disclosure, XSS, Local File Inclusion, Remote Code Execution Vulnerable Version: phpwcms 1.2.5-DEV prior versions also maybe affected Exploitation: Remote with browser Description: -------------------- phpwcms is a web content management system optimized f...
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices
Cisco Response ============== This is Cisco PSIRT's response to the statements made by George Gal in his advisory: WebSense Content Filter Bypass in conjunction with Cisco PIX in packet filter mode, posted on May 08, 2006. The original email/advisory is available at...
ContentBoxx Login.php Cross-Site Scripting
Website : http://www.contentboxx.info/en/ Author : Botan Description: Web Content Management ContentBoxX is a professional software upon which the production of editorial systems, used in the maintenance of Internet and Intranet offers, are based. ContentBoxX is suited for use in demanding Web...
SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access
The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...
