Smiley;Smileys Security Vulnerabilities

Def Blog CMS v1.0.2 - Multiple Web Vulnerabilities

...

Def Blog CMS v1.0.2 - Multiple Web Vulnerabilities

...

IW Guestbook v3.5 - Multiple SQL Injection Vulnerabilities

...

IW Guestbook v3.5 - Multiple SQL Injection Vulnerabilities

...

Windows Live Messenger 14.0.8117 Denial Of Service

...

Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

No description provided by...

Microsoft Windows Live Messenger 14.0.8117 - Animation Remote Denial of Service

Microsoft Windows Live Messenger 14.0.8117 - Animation Remote Denial of...

Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

Exploit for windows platform in category dos /...

Microsoft Windows Live Messenger 14.0.8117 - Animation Remote Denial of Service

...

FreeBSD Ports: pidgin

The remote host is missing an update to the system as announced in the referenced...

Mandriva Update for pidgin MDVSA-2010:085 (pidgin)

Check for the Version of...

Mandriva Update for pidgin MDVSA-2010:085 (pidgin)

Check for the Version of...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:085)

Security vulnerabilities has been identified and fixed in pidgin : The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as...

FreeBSD : pidgin -- multiple remote denial of service vulnerabilities (a2c4d3d5-4c7b-11df-83fb-0015587e2cc1)

Three denial of service vulnerabilities where found in pidgin and allow remote attackers to crash the application. The developers summarized these problems as follows : Pidgin can become unresponsive when displaying large numbers of smileys Certain nicknames in group chat rooms can trigger a crash....

SA-CONTRIB-2010-035: Smileys - Cross Site Request Forgery

The Smileys module provides a text filter that substitutes emoticons with images. The module is vulnerable to cross-site request forgeries (CSRF) via the URL used to delete smileys. A user with "administer smileys" permission could be tricked into visiting the smiley delete URL and unwittingly...

Ubuntu Update for pidgin vulnerabilities USN-902-1

Ubuntu Update for Linux kernel vulnerabilities...

CVE-2010-0423

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

CVE-2010-0423

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

CVE-2010-0423

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

Code injection

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

CVE-2010-0423

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-902-1)

Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. (CVE-2010-0277) Sadrul Habib Chowdhury discovered that...

Pidgin vulnerabilities

Releases Ubuntu 9.10 Ubuntu 9.04 Ubuntu 8.10 Ubuntu 8.04 Packages pidgin - Details Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)

Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly (CVE-2010-0277). In a user in a multi-user chat room has a nickname...

Mandriva Update for pidgin MDVSA-2010:041 (pidgin)

Check for the Version of...

Mandriva Update for pidgin MDVSA-2010:041 (pidgin)

Check for the Version of...

[ MDVSA-2010:041 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:041 http://www.mandriva.com/security/ Package : pidgin Date : February 18, 2010 Affected: 2008.0, 2009.1, 2010.0, Enterprise Server 5.0 Problem Description: Multiple security...

CVE-2010-0423

gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2)...

pidgin -- multiple remote denial of service vulnerabilities

Three denial of service vulnerabilities where found in pidgin and allow remote attackers to crash the application. The developers summarized these problems as follows: Pidgin can become unresponsive when displaying large numbers of smileys Certain nicknames in group chat rooms...

Pidgin MSN Custom Smileys File Disclosure Vulnerability (Windows)

This host has Pidgin installed and is prone to File Disclosure ...

Pidgin MSN Custom Smileys Feature Emoticon Request Traversal Arbitrary File Disclosure

The version of Pidgin installed on the remote host is earlier than 2.6.5. Such versions have a directory traversal vulnerability when processing an MSN emoticon request. A remote attacker could exploit this to read arbitrary...

40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net &#40;Simple Audit&#41;

This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also apply....

FreeNews 1.1 File Upload

...

CVE-2007-2248

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings...

CVE-2007-2248

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings...

Cross site scripting

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings...

CVE-2007-2248

Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the (1) group_id parameter in the groups module or (2) the smiley_id parameter in the smileys modsettings...

Phorum 5.1.20 - admin.php?modsettings Module smiley_id Cross-Site Scripting

Phorum 5.1.20 - admin.php?modsettings Module smiley_id Cross-Site...

Phorum 5.1.20 - &#039;admin.php?modsettings Module smiley_id&#039; Cross-Site Scripting

...

waraxe-2007-SA-049.txt

...

[waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20

[waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20 Author: Janek Vind "waraxe" Date: 19. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-49.html Target software description: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Phorum 5.1.20...

CVE-2007-1255

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

CVE-2007-1255

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

Unrestricted file upload

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

CVE-2007-1255

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

connectix-multi.txt

...

Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit

No description provided by...

Connectix Boards &lt;= 0.7 (p_skin) Multiple Vulnerabilities Exploit

No description provided by...

Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web...

Connectix Boards 0.7 - p_skin Multiple Vulnerabilities

Connectix Boards 0.7 - p_skin Multiple...