xtnew01-sqlxss.txt

Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...

CVE-2006-6746

The CVE concerns Xt-News 0.1, where multiple cross-site scripting (XSS) vulnerabilities affect user-supplied input via the id_news parameter. Specifically, the flaws can be triggered through add_comment.php or show_news.php, enabling remote attackers to inject arbitrary web script or HTML. Impact...

CVE-2006-6746: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-6747: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

Xt-News 0.1 : SQL Injection Vulnerability & XSS

Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...

Xt-News 0.1 - add_comment.php?id_news Cross-Site Scripting

Xt-News 0.1 - addcomment.php?idnews Cross-Site Scripting source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An...

Xt-News 0.1 - show_news.php?id_news Cross-Site Scripting

Xt-News 0.1 - shownews.php?idnews Cross-Site Scripting source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An...

Xt-News 0.1 - show_news.php?id_news SQL Injection

Xt-News 0.1 - shownews.php?idnews SQL Injection source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker...

Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...

Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...

XSS in XT-Commerce v2.0 RC1.2

Advisory: XSS in XT-Commerce v2.0 RC1.2 Home Page: http://xtcommerce/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: advancedsearchresult.php http://www.immobilien-uckermark.de/advancedsearchresult.php?keywords="scriptalert/script"&x=30&y=1...

CVE-1999-0040

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges...

CVE-1999-0040

CVE-1999-0040 affects the X Windowing System’s Xt library. The vulnerability is a buffer overflow in Xt that allows local users to execute commands with root privileges. Public details in connected sources confirm the affected component as Xt within X Windowing System, and the impact is local pri...

CVE-1999-0040: Undefined Security Weakness

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges...

CVE-1999-0040

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges...

Xt Library - Local Privilege Escalation

Xt Library - Local Privilege Escalation include include include define DEFAULTOFFSET 0 define BUFFERSIZE 1491 long getespvoid asm"movl %esp,%eax\n"; mainint argc, char argv char buff = NULL; unsigned long addrptr = NULL; char ptr = NULL; char execshell = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b...

Xt Library - Local Privilege Escalation

include include include define DEFAULTOFFSET 0 define BUFFERSIZE 1491 long getespvoid asm"movl %esp,%eax\n"; mainint argc, char argv char buff = NULL; unsigned long addrptr = NULL; char ptr = NULL; char execshell = "\xeb\x23" "\x5e" "\x8d\x1e" "\x89\x5e\x0b" "\x31\xd2" "\x89\x56\x07" "\x89\x56\x0...