6058 matches found
Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42535/info Online Work Order Suite Lite Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...
Online Work Order Suite ASP 3.10 XSS
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Online Work Order Suite ASP 3.10 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download :...
Beware these telecommuting security mistakes
By Joan Goodchild, CSO Whether it is employees who travel frequently for their job or staff that work out of a home office full or part-time, their mobility poses serious security risks to your organization. Here are the common mistakes employees often make csoonline.com while telecommuting some...
Web hang horse works completely analysis-vulnerability warning-the black bar safety net
Typically, the Microsoft Internet work process is described as follows: ! As a Web hang horse spread, and its object is the Trojan downloaded to the user's local, and a step executed, when the Trojan get executed, it means that there will be more Trojans to be downloaded, and further is performed...
siu guarani - Multiple Vulnerabilities
multiple remote vulnerabilities siu guarani general information ------------------- bug type : multiple remote vulnerabilities software name : SIU Guarani vendor : SIU www.siu.edu.ar authors : proudhon & Ubik date : the 341st day of the year 2008 contact : N/A description : SIU-Guarani is a web...
phpAbook <= 0.8.8b (COOKIE) Local File Inclusion Vulnerability
No description provided by source. phpAbook = 0.8.8b COOKIE Local File Inclusion Vulnerability url: http://sourceforge.net/projects/phpabook/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. U...
Failed assertion in the Unreal engine
Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: the games which have been tested and resulted vulnerable are Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, Shadow Ops and possibly others. instead those which...
NULL pointer in Ventrilo 3.0.2
Luigi Auriemma Application: Ventrilo http://www.ventrilo.com Versions: = 3.0.2 Platforms: Windows, Linux i386, Solaris SPARC, Solaris x86, FreeBSD i386, NetBSD i386, Mac OSX PowerPC Bug: NULL pointer Exploitation: remote, versus server Date: 13 Aug 2008 Authors: Andre Malm Luigi Auriemma web:...
CVE-2008-2887
The CVE-2008-2887 entry describes a directory traversal in index.php of chaozz@work FubarForum 1.5 that allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Affected software: FubarForum 1.5 (chaozz@work). Root cause: improper handling of page param...
CVE-2008-2887
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-2887: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-1839
CVE-2008-1839 affects WORK system e-commerce 4.0.9. The vulnerability is described as multiple cross-site scripting (XSS) in module/main.php, exploitable via the (1) day, (2) month, and (3) year parameters. The notes indicate not all provenance is confirmed and details come from third-party sourc...
CVE-2008-1839
Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2008-1839: Improper Neutralization of Input During Web Page Generation
Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-6574: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the origin parameter to work/work.php in a displayuploadform action, or the forum parameter to 2 forum/viewforum.php or 3 forum/viewthread.php...
Code injection
Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...
CVE-2007-5801
Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...
CVE-2007-5801
Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.