194 matches found
HLstats 1.35 Cross Site Scripting
------------------------------------------- HLstats 1.35 XSS Exploit Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Description: HLstats 1.35 is vulnerable to XSS in stats.php. PoC:...
RedLevel Advisory #020 - HLstats v1.35 Cross-Site Scripting Vulnerability #3
!-- HLstats v1.35 - Cross-Site Scripting Vulnerability 3 Vulnerable Variables: authusername, authpassword Vulnerable File: hlstats.php Vulnerable: HLstats 1.2 other versions may also be vulnerable Google d0rk: "generated in real-time by HLstats" John Martinelli [email protected] RedLevel Securi...
Cross site scripting
Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the action parameter...
CVE-2007-2812
CVE-2007-2812 affects HLstats HLstats 1.35 (and possibly earlier) with a cross-site scripting (XSS) flaw in hlstats.php that allows an attacker to inject arbitrary scripts via PATH_INFO or the action parameter. The connected documents confirm the vulnerability vectors but do not provide patch det...
CVE-2005-2860
Cross-site scripting XSS vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report...
CVE-2005-2860
Cross-site scripting XSS vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report...
maxwebportal136-2.txt
------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...
Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)
No description provided by source. !-- Hi, I'm Soroush Dalili from Grayhatz Security Group GSG . I found dangerous sql injection in Maxwebportal version 1.35,1.36,2.0, 20050418 Next Remote user can inject his/her code in "memKey" var. and change other users password in password.asp Exploit codes ...
CVE-2005-0330
CVE-2005-0330 affects Painkiller 1.35 and earlier (and possibly other versions before 1.61). A buffer overflow in processing the cd-key hash allows remote authenticated users to trigger a denial of service and, possibly, execute arbitrary code. Impact and exploitation details are based on the pro...
[Full-Disclosure] Limited buffer-overflow in Painkiller 1.35
Luigi Auriemma Application: Painkiller http://www.painkillergame.com Versions: = 1.35 Platforms: Windows Bug: limited buffer-overflow Exploitation: remote, versus server in-game Date: 02 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction ...
People Can Fly Painkiller Gamespy 1.3 - CD-Key Hash Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12423/info Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application during server-side authorization of a Gamespy cd-key hash. Painkiller versions...
CVE-2002-1917
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header...
