CGI bugs updated since 09.04.2002
Published:		15.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1918
Type:		remote
Level:		5/10

Affected:		CGI : Anthill
		CGI : csGuestbook
		CGI : csLiveSupport
		CGI : csNewsPro
		CGI : csChatRBox
		POWERBOARDS : Powerboards 2.2
		CGI : ASP-Nuke
		CGI : ForamiX 1.1
		WBB : Burning Board 1.1
		CGI : D-Book 1.4
		CGI : CBook 1.0
		CGI : IcrediBB 1.1
		PHARAO : Pharao 0.06
		CGI : Linker 2.0
		TURNKEYWEB : SunShop 2.5

Original document		Jens Liebchen, SunSop: cross-site-scripting bug (15.04.2002)
		frog frog, Security holes : Linker, Pharao (15.04.2002)
		frog frog, Security holes : D-Book, CBook, IcrediBB (13.04.2002)
		BrainRawt ., SWS Vuln (small but important to those using it.) (12.04.2002)
		frog frog, Security holes in WoltLab Burning Board (11.04.2002)
		frog frog, Security holes in ForamiX (11.04.2002)
		frog frog, Security holes in ASP-Nuke (10.04.2002)
		frog frog, Security holes in Powerboard forum (09.04.2002)
		Steve Gustin, multiple CGIscript.net scripts - Remote Code Execution (09.04.2002)
		Ulf Harnhammar, Anthill login and JavaScript vulnerabilities (09.04.2002)

Discuss:

Read or add your comments to this news (0 comments)

HTML injection via mailto: URL Interenet Explorer
Published:		15.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1929
Type:		client
Level:		5/10
Description:		It's possible to inject HTML text into mailto: reference.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document

http-equiv_(at)_excite.com, More fun with html mail: Outlook Express, Internet Explorer, Other etc (15.04.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in webalizer
Published:		15.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1930
Type:		remote
Level:		5/10
Description:		Buffer overflow in host name resolution during log analizing.

Affected:		WEBALIZER : webalizer 2.01
		AWFFULL : AWFFull 3.7
CVE:		CVE-2007-0510 (Multiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and earlier have unknown impact and attack vectors. NOTE: some of these details are obtained from third party information. NOTE: There may not be any attack vector that crosses privilege boundaries.)

Original document

Spybreak, Remote buffer overflow in Webalizer (15.04.2002)

Discuss:

Read or add your comments to this news (0 comments)