Unfixed XSS vulnerability at www.publicshareware.com

Security researcher Error 403 - forbidden, has submitted on 03/06/2011 a cross-site-scripting XSS vulnerability affecting www.publicshareware.com, which at the time of submission ranked 1412396 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Phpcms 2008 SQL Injection Vulnerability

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ...

phpCMS 2008 - SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...

PHPCMS 2008 SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...

Acritum Femitter Server 1.03 Directory Traversal

--= Exploit Title: Acritum Femitter Server v1.03 Multiple Vulnerabilities --= Date: 2/5/2010 --= Author: Zer0 Thunder --= Software Link: http://acritum.com/dist/fem-dist.exe --= Version: v1.03 --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up wit...

Acritum Femitter Server v1.03 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ====================================================== Acritum Femitter Server v1.03 Multiple Vulnerabilities ====================================================== --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Serv...

Acritum Femitter Server 1.03 - Multiple Vulnerabilities

--= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up with few vulnerabilities of this .. some vulns are already has been revelied but some are not so lets have a look HTTP Server ----------- In the Femitter Server Application HTTP tab there are few...

Acritum Femitter Server 1.03 - Multiple Vulnerabilities

Acritum Femitter Server 1.03 - Multiple Vulnerabilities --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up with few vulnerabilities of this .. some vulns are already has been revelied but some are not so lets have a look HTTP Server ----------- In...

Reading Apache CustomLogfiles - Windows

Reading Apache CustomLogfiles SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96022";...

Miniature Java Web Sever 1.71 Path Traversal / Open Redirect

Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path Traversal attack aims to access files and directories that are stored outside the web root folder. By...

Miniature Java Web Server <= 1.71 Multiple Vulnerabilities

No description provided by source. Exploit Title: Miniature Java Web Server = 1.71 Multiple Vulnerabilities. Date: 26/03/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download...

Miniature Java Web Server <= 1.71 Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits ========================================================== Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path...

miniature java Web server 1.71 - Multiple Vulnerabilities

Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: \r\n\r\n Lead to: HTTP RE...

Code to mitigate IIS semicolon zero-day

This mitigation should help block attempts to exploit the IIS semicolon zero-day BID 37460, but no warranties and no guarantees. It didn't crash my web servers during testing, but I make no representations as to how it will or won't perform on anyone else's web servers. This mitigation is only...

Ubuntu: Security Advisory (USN-403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache HTTP服务器403 Error页面跨站脚本漏洞

BUGTRAQ ID: 29112 Apache HTTP Server是一款流行的Web服务器。 如果Apache服务器使用Forbidden 403默认页面的话，则用户在该服务器上请求特制的URL触发403 Error错误后就可能导致在用户浏览器会话中执行跨站脚本。 Apache Group Apache 2.2.x Apache Group Apache 1.3.x Apache Group ------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apache.org...

Cross site scripting

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...

CVE-2008-2168

CVE-2008-2168 : The linked SUSE/NVD entries describe a cross-site scripting (XSS) vulnerability in Apache HTTP Server up to version 2.2.6 and earlier, exploitable via UTF-7 encoded URLs that are mishandled when rendering the 403 Forbidden error page. Attacker-provided URL input can inject arbitra...

CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...

CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...