CVE-2008-2263

creationtimestamp| type| source ---|---|--- 2008-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5611...

CVE-2008-2443

creationtimestamp| type| source ---|---|--- 2008-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5610...

CVE-2008-1956

CVE-2008-1956 affects Wikepage Opus 13 (2007.2). The vulnerability is a cross-site scripting (XSS) flaw in index.php via the wiki parameter, allowing an attacker to inject arbitrary script/HTML. The available sources document the affected file and parameter but do not provide exploit code, specif...

CVE-2008-1884

CVE-2008-1884 is a directory traversal vulnerability in index.php for Wikepage Opus 13 2007.2, allowing remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter (distinct from CVE-2006-4418). Connected sources corroborate a similar pattern for Wikepage 2006...

Fixed XSS vulnerability at www.freistaat.org

Security researcher Fabian Fingerle, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.freistaat.org, which at the time of submission ranked 9262730 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It...

Unfixed XSS vulnerability at www.lyhmwz.cn

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.lyhmwz.cn, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixed. ...

Unfixed XSS vulnerability at www.nbflight.com

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.nbflight.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixe...

CVE-2008-1908

creationtimestamp| type| source ---|---|--- 2008-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5437...

Unfixed XSS vulnerability at www.xzqh.cn

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.xzqh.cn, which at the time of submission ranked 3492497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

Joomla Component joomlaXplorer <= 1.6.2 Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Joomla Component joomlaXplorer target.com/path/index.php?option=comjoomlaxplorer&action=showerror&dir=../../directory example :...

wikepageopus-traverse.txt

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/28664/info Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

JVN#21563357 Mozilla Firefox cross-site scripting vulnerability

Mozilla Firefox does not properly handle certain HTML documents in ShiftJIS encoding. According to MFSA 2008-13, this flaw could potentially be used to evade web-site input filters and result in a XSS attack hazard. Impact An arbitrary script may be executed on the user's web browser. Solution...

AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Format String Vulnerability in Logger and Manager |...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.216 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue....

Unfixed XSS vulnerability at www.dealtime.co.uk

Security researcher mygotmanoel, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting www.dealtime.co.uk, which at the time of submission ranked 14466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at nedir.sempatiksitem.com

Security researcher SeYMeN, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting nedir.sempatiksitem.com, which at the time of submission ranked 809027 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...