Websecurity - Веб безпека

В даній добірці уразливості в веб додатках:

• Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN ‘my.logon.php3′ server-side script (деталі)
• Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN ‘my.activation.php3′ server-side script (деталі)
• Lazarus Guestbook (admin.php) Remote File Include Expliot (деталі)
• dynaliens v2.0/v2.1 bypass admin authentification + XSS (деталі)
• xss in phpmyadmin >=2.8.0 and < 2.10.0 (деталі)
• Remote File Include In Script copyright (c) James Coyle; JCcorp (деталі)
• WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability (деталі)
• Vulnerability in RubyGems (деталі)
• Vulnerability in BEA AquaLogic Enterprise Security (деталі)
• Обхід обмежень безпеки в Fishyshoop (деталі)
• SQL-ін’єкція в Calendar MX BASIC (деталі)
• PHP remote file inclusion vulnerability in Neon Labs Website (nlws) (деталі)
• Обхід обмежень безпеки в GOsa (деталі)
• Міжсайтовий скриптінг в PHP iCalendar (деталі)
• PHP remote file inclusion vulnerability in Upload-Service 1.0 (деталі)

This entry was posted on 16:29 06.03.2008 and is filed under Уразливості. You can follow any responses to this entry through the RSS 2.0 feed.