CVE-2007-5677

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

CVE-2007-5677

Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...

CVE-2007-5677

CVE-2007-5677 describes a cross-site scripting (XSS) vulnerability in the Hackish BETA 1.1 software, specifically in the shoutbox/blocco.php component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value to the go_shout parameter. The vulnerabilit...

shoutbox-xss.txt

Hackish BETA 1.1 XSS Discovered by Matrix86 Vendor: http://hackish.eu POF http://site.com/hackish/shoutbox/blocco.php?goshout=Matrix86%3C/a%3E%3C/p%3E%3C/div%3E%3Chtml%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E%3C/html%3E...

CVE-2003-1351

The CVE-2003-1351 issue affects EditTag 1.1, exposed via edittag.cgi. It is a directory traversal vulnerability that allows remote attackers to read arbitrary files by passing a encoded path like "%2F.." in the file parameter. The vulnerability can lead to partial confidentiality impact by exposi...

CVE-2003-1348

The CVE-2003-1348 entry describes a Cross-site Scripting (XSS) vulnerability in the guestbook.cgi component of ftls.org Guestbook 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) name, or (3) title fields. Public references in the initial docu...

CVE-2003-1351

Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." encoded slash dot dot in the file parameter...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

This module exploits a stack buffer overflow in the iMatix Corporation Xitami Web Server. If a malicious user sends an If-Modified-Since header containing an overly long string, it may be possible to execute a payload remotely. Due to size constraints, this module uses the Egghunter technique. Th...

CVE-2007-4761

CVE-2007-4761 describes an unrestricted file upload vulnerability in upload.php for Barbo91 1.1, enabling remote attackers to upload and execute arbitrary code via unspecified vectors. The description notes unknown provenance and that details are from third-party information; no concrete exploit ...

Sql injection

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4628

An SQL injection vulnerability affects phpns 1.1 (shownews.php) where the id parameter is unsafely used, allowing remote attackers to execute arbitrary SQL commands. This allows impact to data confidentiality, integrity, and availability as per CVSS 2.0 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No remediatio...

irc/bitchx -- multiple vulnerabilities

bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable. Nico Golde reports: There is a security issue in ircii-pana in bitchx' hostname command. The ehostname function...

bitchx-heap.txt

!/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the ret address to the shellcode. The...

BitchX 1.1 Final - MODE Remote Heap Overflow

BitchX 1.1 Final - MODE Remote Heap Overflow !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT...

BitchX 1.1 Final - MODE Remote Heap Overflow

!/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the ret address to the shellcode. The...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

Exploit for linux platform in category remote exploits ========================================================== BitchX 1.1 Final MODE Remote Heap Overflow Exploit 0-day ========================================================== !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By...

Directory traversal

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2007-4457

CVE-2007-4457 describes a directory traversal vulnerability in Dalai Forum 1.1, specifically in forumreply.php, where an attacker can manipulate the chemin parameter using .. to include and execute arbitrary local files. The affected component is the forumreply.php script in Dalai Forum 1.1; the ...

CVE-2007-4327

Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 index.php or 2 datei.php...