Unfixed XSS vulnerability at gabrieldedavid.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting gabrieldedavid.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at www.hackticaret.com

Security researcher 0ssi3, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.hackticaret.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is currently...

Unfixed XSS vulnerability at www.unicom.co.il

Security researcher BackDoor, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.unicom.co.il, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

Unfixed XSS vulnerability at www.fraudcentral.org.uk

Security researcher www.r3t.n3t.nl, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.fraudcentral.org.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It ...

Unfixed XSS vulnerability at objekt-market.com

Security researcher BackDoor, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting objekt-market.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently...

Unfixed Redirect vulnerability at www.beykozkurek.org

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.beykozkurek.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If...

Design/Logic Flaw

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

CVE-2007-4993

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

CVE-2007-4993

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

Unfixed XSS vulnerability at www.highlandwarriorsguild.com

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.highlandwarriorsguild.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. I...

DSquare Exploit Pack: D2SEC_XITAMI

Name| d2secxitami ---|--- CVE| CVE-2007-5067 Exploit Pack| D2ExploitPack Description| 0 Day Xitami Web Server 2.5c2 Stack Overflow Notes|...

Unfixed XSS vulnerability at www.resourcesandtrust.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.resourcesandtrust.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at janetthephotographer.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting janetthephotographer.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.neapolitanmusic.com

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.neapolitanmusic.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at procoffee.fi

Security researcher NurBoNegro, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting procoffee.fi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...

Cross site scripting

Cross-site scripting XSS vulnerability in catalogproductswithimages.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at www.flinkymail.de

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.flinkymail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.webx.tv

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.webx.tv, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.doctormd.net

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.doctormd.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is currently...

CVE-2007-4937: Undefined Security Weakness

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...