Microsoft Internet Explorer 6 - Meta Data Foreign Domain Spoofing

source: https://www.securityfocus.com/bid/10248/info A vulnerability has been reported in Microsoft Internet Explorer that may facilitate certificate spoofing. This issue could aid in attacks which falsify web content to victim users. The cause of the vulnerability is that it is possible to embed...

Moodle 1.11.2 - Cross-Site Scripting

Moodle 1.11.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10251/info It has been reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it...

[Full-Disclosure] [SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection

Products: Postnuke v 0.726 http://www.postnuke.com Date: 15 April 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors:skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.726 and below SQL injection...

CVE-2004-0379

Multiple cross-site scripting XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts...

Mambo Open Source Multiple Vulnerabilities

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

mambo45.txt

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

Mambo 4.5 - Multiple Vulnerabilities

Mambo 4.5 - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source...

Mambo < 4.5 - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the Web easy...

Mambo OS v4.5/v4.6: remote command execution

Product: Mambo Open Source v4.5 Mambo Open Source v4.6 CVS Vendor: Miro International Pty Ltd. Author: FraMe frame at kernelpanik.org URL: http://www.kernelpanik.org CONTENTS 1. Overview 2. Description. 3. Details 4. Patches. 1. Overview. Mambo Open Source is an, open source, modular, web content...

Divine OpenMarket Content Server XSS

Content Server is a web content management from Divine www.divine.com A Cross Site Scripting in this product allows injection of hostile HTML/script into the error page. Example : http://www.mouffleton.com/servlet/ContentServer?pagename=body20onload=alertdocument.cookie; Workaround : Catch error...

N/X Web Content Management Multiple Script Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using N/X Web content management system. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network...

NX Web Content Management System 2002 Prerelease 1 - datasets.php?c_path Local File Inclusion

NX Web Content Management System 2002 Prerelease 1 - datasets.php?cpath Local File Inclusion source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacke...

N/X Web Content Management System 2002 Prerelease 1 - 'datasets.php?c_path' Local File Inclusion

source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...

N/X Web Content Management System 2002 Prerelease 1 - 'menu.inc.php?c_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...

CVE-2002-1651

Cross-site scripting XSS vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the 1 vformat or 2 vfilter functions...

PHP-Nuke 5.x/6.0/6.5 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/6244/info everal cross site scripting vulnerabilities have been reported for PHP-Nuke. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link. Attacker-supplied HTML and script code may be executed on a web client ...

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting

source: https://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS enabled. It has been reported that LiteServe fails to sanitize...

phpLinkat 0.1 - Multiple Cross-Site Scripting Vulnerabilities

phpLinkat 0.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5890/info Reportedly, phpLinkat is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML and...