Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 domain parameter to lookupresult.asp, and the 2 word1 and 3 word2 parameters to suggestresult.asp...

CVE-2008-1560

DigiDomain 2.2 by Digiappz is affected by multiple XSS vulnerabilities. The issues arise in lookup_result.asp (domain parameter) and suggest_result.asp (word1, word2 parameters), enabling remote attackers to inject arbitrary script/HTML. The CVE-2008-1560 description and cross-document references...

DigiDomain 2.2 - suggest_result.asp Multiple Cross-Site Scripting Vulnerabilities

DigiDomain 2.2 - suggestresult.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28475/info DigiDomain is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

digidomain-xss.txt

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

Multiple XSS in DigiDomain

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

CVE-2008-1494

SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425...

CVE-2008-1494

SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425...

CVE-2008-1494

CVE-2008-1494 describes an SQL injection in Easy-Clanpage 2.2 affecting inc/module/online.php via the id parameter in a user details action, allowing remote attackers to execute arbitrary SQL commands. This vector is distinct from CVE-2008-1425 (gallery index.php). The connected documents confirm...

Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability

No description provided by source. .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Easy-Clanpage v2.2 gallery Remote SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Author: n3w7u + Mail: [email protected] + Source:...

CVE-2008-1314

SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...

xoopsglossario-sql.txt

XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

XOOPS Module Glossario 2.2 - sid SQL Injection

XOOPS Module Glossario 2.2 - sid SQL Injection XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

PHP-Nuke Johannes Hass 'Gaestebuch 2.2 Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28063/info The 'gaestebuch' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0914

Multiple cross-site scripting XSS vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

lib/Driver/sql.php in Turba 2 turba2 Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify...

DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks

ID : DOINGSOFT-2008-02-11-002 Discovered : 15/10/2007 Corrected : not knowned, vendors did not response to mail since Decembre 2007 Publication :11/02/2008 Credits : Ha.ckers.fr Team Affected Software : IPDiva VPNSSL Versions : 2.2 branch 2.2.8.84 2.3 branch 2.3.2.14 Vulnerability : XSS...

CVE-2008-0735

CVE-2008-0735 pertains to AuraCMS 2.2, where a flaw in mod/gallery/ajax/gallery_data.php allows an attacker to inject SQL via the albums parameter. The documented impact is the ability to execute arbitrary SQL commands remotely, indicating complete confidentiality, integrity, and availability imp...

megabbs-xss.txt

HSC MegaBBS ASP Forum Cross-Site Scripting MegaBBS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Debian Security Advisory DSA 458-1 (python2.2)

The remote host is missing an update to python2.2 announced via advisory DSA 458-1. OpenVAS Vulnerability Test $Id: deb4581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 458-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 086-1 (ssh-nonfree, ssh-socks)

The remote host is missing an update to ssh-nonfree, ssh-socks announced via advisory DSA 086-1. OpenVAS Vulnerability Test $Id: deb0861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 086-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...