PT-2010-5508

Name of the Vulnerable Software and Affected Versions eSyndiCat Directory version 2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the title parameter to API endpoints such as "suggest-category.php" and "suggest-listing.php"...

CVE-2010-4504: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

Nuked-Klan SP4 RFI Vulnerability

No description provided by source. ======================================================================================== $ | Title : Nuked-Klan SP4 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Nuked-Klan 1.7.7 RFI Vulnerability

No description provided by source. ======================================================================================== | Title : Nuked-Klan 1.7.7 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

digidomain-xss.txt

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

Sql injection

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6543: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

eSyndiCat Link Exchange Script 2005-2006 SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

DEBIAN-CVE-2007-3140

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...

CVE-2006-0833

CVE-2006-0833 concerns multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified vectors targeted at the Add URL and Suggest Category modules. Affected product: Barracuda Directory 1.1. T...

CVE-2006-0833

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...

CVE-2006-0833: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...

[SA18965] Barracuda Directory Multiple Script Insertion Vulnerabilities

TITLE: Barracuda Directory Multiple Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18965 VERIFY ADVISORY: http://secunia.com/advisories/18965/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Barracuda Directory 1.x http://secunia.com/product/8189/...