exploits , vulnerabilities , articles , National Rail Enquiries Live Departure Boards Gadget Remote Script Code Execution Vulnerability

Title	National Rail Enquiries Live Departure Boards Gadget Remote Script Code Execution Vulnerability
Published	2008-04-25-12:00AM
Updated	2008-04-28-04:26PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	R Dominguez Vega of MWR InfoSecurity
Vulnerable	National Rail Enquiries Live Departure Boards Gadget 1.0
Not Vulnerable	National Rail Enquiries Live Departure Boards Gadget 1.1
Code	Attackers exploit this issue by performing man-in-the-middle attacks.
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-10-10 CUPS Multiple Heap Based Buffer Overflow Vulnerabilities
• 2008-10-10 Sun Java System Web Proxy Server FTP Subsytem Heap Based Buffer Overflow Vulnerability
• 2008-10-09 ModSecurity Transformation Caching Security Bypass Vulnerability
• 2008-10-09 DATAC RealWin SCADA Server Remote Stack Buffer Overflow Vulnerability
• 2008-10-09 Avaya Communication Manager Web Administration Multiple Security Vulnerabilities
• 2008-10-09 HP System Management Homepage (SMH) for Linux and Windows Cross Site Scripting Vulnerability
• 2008-10-09 YaCy Multiple Unspecified Vulnerabilities
• 2008-10-09 Opera Cached Java Applet Security Bypass Vulnerability
• 2008-10-09 WOW Raid Manager Unspecified Cross Site Scripting Vulnerability
• 2008-10-09 Drupal EveryBlog Module Multiple Unspecified Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sun, 12 Oct 2008 08:40:46 +0000