Code Execution Vulnerability in YY Voice

YY Voice is an Internet-based team voice communication platform developed by Guangzhou Huado Network Technology Co. A code execution vulnerability exists in YY Voice, which can be exploited by an attacker to execute arbitrary code...

YY Voice DLL Hijacking Vulnerability

YY Voice is an Internet-based team voice communication platform developed by Guangzhou Huado Network Technology Co. YY Voice has a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

Adobe Flex Buffer Overflow Vulnerability

Adobe Flex is the United States of America Odobie Adobe company's set of free, open source framework for building and maintaining Web applications. A buffer overflow vulnerability exists in the yygetnextbuffer function in Adobe Flex. A remote attacker could exploit this vulnerability to cause a...

YY vulnerability collection(sql,xss,arbitrary file read,svn,information leakage)-vulnerability warning-the black bar safety net

Brief description: yy master presencexssvulnerability, it can steal cookies; sub-Station exists sql,arbitrary file read,svn,information leakage and other vulnerabilities. Vulnerability type: SQL injection vulnerability Hazard rating: high...

CVE-2012-2643

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

CVE-2012-2643

CVE-2012-2643 affects YY-BOARD by KENT-WEB: an XSS vulnerability exists in handling web form entries, exploitable through a crafted form input to execute arbitrary script/HTML in a user’s browser. The issue is described as occurring in YY-BOARD prior to version 6.4 and is due to improper handling...

CVE-2012-2643

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

CVE-2012-2643: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

JVN#03582364: YY-BOARD vulnerable to cross-site scripting

YY-BOARD is a bulletin-board software. YY-BOARD contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...

CVE-2006-0729: Undefined Security Weakness

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...