DCP-Portal 3.74.x5.x - calendar.php HTTP Response Splitting

DCP-Portal 3.74.x5.x - calendar.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11340/info DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET...

DCP-Portal 3.7/4.x/5.x - 'calendar.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11340/info DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remote attacker may exploit this...

Snitz Forums 2000 - 'down.asp' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11201/info Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET...

getinternet.txt

CRIOLABS - Software: getInternet - Type: E-business:Internet - Company: getSolutions - Date: 09-9-2004 Software: getInternet Platform: ASP, Microsoft SQL Comments: Administration section Not Tested Description getInternet will allow you to maintain, manage and control all of the content on your...

Comersus Cart 5.0 - HTTP Response Splitting

Comersus Cart 5.0 - HTTP Response Splitting source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or...

Comersus Cart 5.0 - HTTP Response Splitting

source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks, which...

Nihuo Web Log Analyzer 1.6 - HTML Injection

source: https://www.securityfocus.com/bid/10988/info An HTML injection vulnerability is reported in Nihuo Web Log Analyzer. The problem occurs due to a lack of proper sanitization of user-supplied input data. Attackers may potentially exploit this issue to manipulate web content or to steal...

Moodle 1.11.2 - Cross-Site Scripting

Moodle 1.11.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10251/info It has been reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...

Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing

Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing source: https://www.securityfocus.com/bid/10248/info A vulnerability has been reported in Microsoft Internet Explorer that may facilitate certificate spoofing. This issue could aid in attacks which falsify web content to victim...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to...

Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing

source: https://www.securityfocus.com/bid/10248/info A vulnerability has been reported in Microsoft Internet Explorer that may facilitate certificate spoofing. This issue could aid in attacks which falsify web content to victim users. The cause of the vulnerability is that it is possible to embed...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it...

[Full-Disclosure] [SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection

Products: Postnuke v 0.726 http://www.postnuke.com Date: 15 April 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors:skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.726 and below SQL injection...

CVE-2004-0379

Multiple cross-site scripting XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts...

mambo45.txt

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

Mambo Open Source Multiple Vulnerabilities

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

Mambo 4.5 - Multiple Vulnerabilities

Mambo 4.5 - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source...

Mambo < 4.5 - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the Web easy...

Mambo OS v4.5/v4.6: remote command execution

Product: Mambo Open Source v4.5 Mambo Open Source v4.6 CVS Vendor: Miro International Pty Ltd. Author: FraMe frame at kernelpanik.org URL: http://www.kernelpanik.org CONTENTS 1. Overview 2. Description. 3. Details 4. Patches. 1. Overview. Mambo Open Source is an, open source, modular, web content...

Divine OpenMarket Content Server XSS

Content Server is a web content management from Divine www.divine.com A Cross Site Scripting in this product allows injection of hostile HTML/script into the error page. Example : http://www.mouffleton.com/servlet/ContentServer?pagename=body20onload=alertdocument.cookie; Workaround : Catch error...