www.eVuln.com : "post" - Non-persistent XSS in slickMsg

www.eVuln.com advisory: "post" - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/161/summary.html Details: http://evuln.com/vulns/161/description.html -----------Summary----------- eVuln ID: EV0161 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Si...

slickMsg 0.7-alpha Cross Site Scripting

www.eVuln.com advisory: "url" BBCode XSS in slickMsg Summary: http://evuln.com/vulns/160/summary.html Details: http://evuln.com/vulns/160/description.html -----------Summary----------- eVuln ID: EV0160 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Site Scriptin...

www.eVuln.com : Non-persistent XSS in slickMsg

www.eVuln.com advisory: Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/159/summary.html Details: http://evuln.com/vulns/159/description.html -----------Summary----------- eVuln ID: EV0159 Software: slickMsg Version: 0.7-alpha Critical Level: low Type: Cross Site Scripting Status:...

slickMsg 0.7-alpha - 'top.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45343/info slickMsg is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

WordPress Plugin Safe Search - 'v1' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45267/info The Safe Search plugin for Wordpress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Uploader 0.7 Shell Upload

Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: "File viewer for Uploader" 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your Shell Link Click And Go To Shell...

Uploader 0.7 Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================= Uploader 0.7 Shell Upload Vulnerability ======================================= Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de...

Uploader 0.7 - Arbitrary File Upload

Uploader 0.7 - Arbitrary File Upload Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: "File viewer for Uploader" 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your...

Uploader 0.7 - Arbitrary File Upload

Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: "File viewer for Uploader" 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your Shell Link Click And Go To Shell...

MediaCoder 0.7.x Buffer Overflow

================================================================================= MediaCoder 0.7.x .m3u & .lst universal local buffer overlow exploit all devices =================================================================================...

AN Guestbook Local File Inclusion Vulnerability

This host is running AN Guestbook and is prone to Local File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbanguestbooklfivuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AN Guestbook Local File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH...

e107 Plugin userjournals_menu (blog.id) SQL Injection Vulnerability

No description provided by source. e107 Plugin userjournalsmenu blog.id SQL injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : inurl:"userjournals.php?blog." -------------------------------------------------- ! Product...

Sql injection

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter...

CVE-2008-6272

Dragan Mitic Apoll web app (0.7 beta and 0.7.5) contains an SQL injection in admin/index.php. The vulnerability arises from insufficient input sanitization of the pass parameter, enabling remote attackers to manipulate SQL commands. Affected component: admin/index.php; vulnerable vector is user-s...

CVE-2008-6270

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

CVE-2008-6270

CVE-2008-6270 affects Dragan Mitic Apoll 0.7 beta and 0.7.5, via an SQL injection in admin/index.php where the user parameter is not sufficiently sanitized, allowing remote SQL commands. OpenVAS corroborates a SQLi vulnerability; exploitation status or patch details are not provided in the suppli...

CVE-2008-6217

CVE-2008-6217 describes a cross-site scripting (XSS) vulnerability in Extrakt Framework 0.7 affecting index.php. The issue allows remote attackers to inject arbitrary web script or HTML through the plugins[file][id] parameter. This entry provides the attack vector and impact as described, but doe...

DEBIAN-CVE-2008-5076

htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."...

Design/Logic Flaw

htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings."...

CVE-2008-5076

CVE-2008-5076 affects htop where non-printable characters in process names were not sanitized, enabling local users to influence terminal output (hide processes, modify files via crafted process name). Connected advisories show distribution patches introducing non-printable character filtering (e...