IntranetApp XSS vuln.

IntranetApp XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/intranetapp-xss-vuln.html vendor:www.aspapp.com/content.asp?contentid=322 affected version:3.3 and prior Product Description: IntranetApp gets groups on the same page with tools...

Papoo Multiple SQL vuln.

Papoo Multiple SQL vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/papoo-multiple-sql-vuln.html vendor:http://www.papoo.org/ affected version:2.1.2 and prior Product Description: Papoo ist an easy to use, accessible CMS. It respects for...

[SA18026] UStore Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: UStore Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18026 VERIFY ADVISORY: http://secunia.com/advisories/18026/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: UStore...

Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass

Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass Author: Attila Gerendi Darkz Date: December 20, 2005 Package: Enterprise Connector http://www.enterpriseheart.com/site/modules/mydownloads/ Versions Affected: 1.02 Other versions may also be affected. Severity: SQL Injectio...

ODFaq SQL inj. vuln.

ODFaq SQL inj. vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 vendor:http://www.oodie.com/project/odfaq/ affected version: 2.1.0 and prior Product Description: PHP application that allows you to manage frequently asked questions. You can create/edit/delete entries using user-friendly web base...

damoon(r) XSS vuln

damoonr XSS vuln Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/damoon-xss-vuln.html vendor:http://www.mindroute.us/?id=2452 affected version: latest Vuln. Description: damoonr contains a flaw that allows a remote cross site scripting attack. Thi...

FarCry XSS vuln.

FarCry XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/farcry-xss-vuln.html vendor:http://farcry.daemon.com.au/ affected version:3.0 and prior Product Description: FarCry is an open source Content Management System CMS, originally...

Magnolia XSS vuln.

Magnolia XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magnolia-xss-vuln.html vendor:http://www.magnolia.info affected version:2.1 and prior Product Description: Magnolia is the free, open source, J2EE deployable content management...

Honeycomb Archive & Honeycomb Archive Enterprise vuln.

Honeycomb Archive & Honeycomb Archive Enterprise vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html vendor:http://www.quicksquare.com/ affected version:Honeycomb Archive 3.0 and Honeycomb Archive...

e-publish CMS vuln.

e-publish CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/e-publish-cms-vuln.html vendor:http://www.e-publish.gr/ affected version:v2.0 and prior Product Description: The e-publish web application is a content management system that is...

RED QUEEN Path Disclosure

RED QUEEN Path Disclosure Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/red-queen-path-disclosure.html vendor:http://www.randommouse.com/cgi-bin/rms/ product/about/aboutproduct.cgi?sku=REDQN &referer=hotscripts&creative=linkindexing affected...

Webglimpse XSS vuln.

Webglimpse XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/webglimpse-xss-vuln.html vendor:http://webglimpse.net/ affected version:2.14.1 and prior Product Description: Webglimpse can index and search any collection of documents you choo...

ClickCartPro (CCP) XSS vuln.

ClickCartPro CCP XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html vendor:http://www.clickcartpro.com/ affected version:5.1 and prior Product Description: CCP is a full featured shopping cart engine that will...

bbBoard v2 XSS vuln.

bbBoard v2 XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/bbboard-v2-xss-vuln.html vendor:http://www.bbv2.com/ affected version: v2.56 and prior Product Description: bbBoard v2 is the best message board software, guaranteed! bbBoard is...

Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)

Exploit for generator platform in category shellcode ====================================================== Multi-Format Shellcode Encoding Tool - Beta v2.0 w32 ====================================================== / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a...

ezUpload Pro vuln

ezUpload Pro vuln Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ezupload-pro-vuln.html vendor:http://www.scriptscenter.com/ezupload/ affected version: 2.2 and prior Product Description: ezUpload Pro is the world's most popular PHP upload solutio...

ECTOOLS - Onlineshop XSS

ECTOOLS - Onlineshop XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ectools-onlineshop-xss.html vendor:http://www.ectools.de/ affected version:1.0 and prior Product Description: ECTOOLS Onlineshop contains a trackingsystem, to let your...

Multi-Format Shellcode Encoding Tool - Beta 2.0 w32

Multi-Format Shellcode Encoding Tool - Beta v2.0 w32. Shellcode exploit for generator platform / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" .SP dSSP' sSSSSSSP...

ECW-Cart XSS vuln.

ECW-Cart XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ecw-cart-xss-vuln.html vendor:www.soft4e.com/cart.html affected version:2.03 and prior Product Description: ECW-Cart - simple for use featured shopping cart with ability to use MS...

Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)

No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: Thi...