Unfixed XSS vulnerability at www.namedrive.com

Security researcher WHK, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting www.namedrive.com, which at the time of submission ranked 6867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

CVE-2007-5312

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

CVE-2007-5312: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

TorrentTrader Classic Mutiple Remote vulnerabilities

Hello,, TorrentTrader Classic Mutiple Remote vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on TorrentTrader Classic v1.07 local file inclusion backend/admin-functions.php?ssuri=dd Xss...

vBulletin vCard PRO XSS

vBulletin vCard PRO XSS http://www.albatoul.net/vcard/gbrowse.php?catid=9&sortby=XSS...

CVE-2006-3152: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 sectio parameter in a login.php, b writenewad.php, c newad.php, d printad.php, e askseller.php, f browse.php, g showmemberads.php, h notead.php, i abuse.php, ...

CVE-2006-1560: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly 1 id and 2 topicid, in a browse.php, b category.php, c gallery.php, d poll.php, and e possibly other unspecified scripts. NOTE:...

CVE-2006-1082: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...

phpArcadeScript 2.0 browse.php Multiple Parameter XSS

phpArcadeScript 2.0 browse.php Multiple Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...

CVE-2005-4586: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the 1 sql parameter in browse.php and the 2 sid, 3 lid, 4 gid, and 5 token parameters in certain PHP scripts...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2005-2698: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

CVE-2005-2436

CVE-2005-2436 affects Website Baker Project. Affected functionality: browse.php allows remote disclosure of sensitive data. Root cause: error messages reveal the filesystem path when accessing (1) a non-existent dir parameter value or (2) direct requests to certain PHP files. Impact: partial conf...

CVE-2005-2436

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...

CVE-2005-2436: Undefined Security Weakness

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via 1 a directory that does not exist in the dir parameter or 2 a direct request to certain php files, which reveal the path in an error message...

CVE-2005-2435: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2005-2399: Undefined Security Weakness

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to 1 browse.php, 2 export.php, 3 conditions.php, or 4 spss.php...

CVE-2005-2398: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via 1 the sid, start, and id parameters to browse.php, the sid parameter to 2 dataentry.php, 3 export.php, 4 admin.php, 5 conditions.php, 6 spss.php, 7 deletesurvey.php, 8...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2380: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 start, and 3 id parameters to browse.php, or the sid parameter to 4 dataentry.php or 5 export.php...