Searching person to person software vulnerabilities

Cross-site scripting vulnerabilities (XSS) in b

vulnerabilities | Cross-site | scripting |

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.


Cross-site scripting (XSS) vulnerability in Int

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter.


SQL injection vulnerability in (1) people.php,

vulnerability | injection | SQL |

SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.


** DISPUTED ** Multiple unspecified vulnerabil

vulnerabilities | unspecified | DISPUTED | Multiple | vectors | claimed | ToorCon | Firefox | Mozilla | during | impact | have |

** DISPUTED ** Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox vulnerabilities. The person who was speaking with me made this claim, and I honestly have no idea if he has them or not."


Software vulnerabilities results 1 to 5 of 5     
Page: 1