digishop v 4.0.0 Xss Vuln.

venedor : http://digishop.sumeffect.com Version : 4.0.0 latest Version 08/25/2006 . Exploite : http://example.com/shopping-cart-software/cart.php?m=productlist&pageNumber=&c=190&v=&sortBy=xss&search=xss Discoverd by : meto5757 Greats : my lovely girl friend :D...

Digishop 4.0 - cart.php Cross-Site Scripting

Digishop 4.0 - cart.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20297/info digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the...

Digishop 4.0 - 'cart.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20297/info digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context ...

DEBIAN-CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

PT-2006-1134 · Crawl · Crawl

Name of the Vulnerable Software and Affected Versions: crawl versions prior to 4.0.0 Description: The issue allows local users to gain privileges due to insecure calls to programs when saving and loading games. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to...

Mercora IMRadio 4.0.0.0 - Local Password Disclosure

Mercora IMRadio 4.0.0.0 - Local Password Disclosure /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] =====...

Mercora IMRadio 4.0.0.0 - Local Password Disclosure

/================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...

SSH IPSEC Express 4.0.0 VPN Detection

Binary data 3082.prm...

CVE-2002-1806

CVE-2002-1806 is an XSS vulnerability in Drupal 4.0.0 . Connected sources repeatedly describe a vulnerability that allows remote attackers to inject arbitrary web script or HTML via a Javascript payload in an IMG tag. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with impact on integri...

CVE-2002-1806

Cross-site scripting XSS vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2005-2038

Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...

[SA15762] Fortibus CMS "username" and "ID" SQL Injection Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-1787

SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries...

CVE-2004-1787

CVE-2004-1787 affects PostCalendar 4.0.0 . The vulnerability is a SQL injection in search queries that allows remote attackers to execute arbitrary SQL commands. Root cause, as stated, is unvalidated/unsafely composed input in the search parameter leading to injection. The impact is described as ...

CVE-2004-0103

crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow...

CVE-2001-1385

The CVE-2001-1385 issue concerns the Apache module for PHP 4.0.0–4.0.4. When a virtual host is configured with engine = off, PHP can be disabled for other virtual hosts, causing Apache to serve PHP source code instead of executing it. This is a disclosure vulnerability affecting PHP/Apache deploy...