CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors...

CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors...

CVE-2009-3121

Cross-site scripting XSS vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3122

The CVE-2009-3122 entry concerns the Ajax Table module 5.x for Drupal, which does not perform access control. This unspecified-vectors flaw allows remote attackers to delete arbitrary users and nodes. The description confirms the vulnerable component and the impact (unauthorized deletion) but pro...

CVE-2009-3121

The CVE-2009-3121 entry describes a cross-site scripting (XSS) vulnerability in the Drupal Ajax Table module 5.x. The affected component is the Ajax Table module (Drupal) version 5.x; the root cause is not detailed beyond generic XSS in the module. Impact is described as allowing remote attackers...

LiveStreet Cross Site Scripting

============================================== LiveStreet Xss inj3ct0r.com Vulnerable Exploit ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

SA-CONTRIB-2009-053 - Ajax Table - Multiple vulnerabilities

The Ajax Table module allows one to create AJAX-refreshable tables by supplying a few parameters. Access bypass The module lacks access checks, which makes it possible for any user to delete arbitrary users and nodes. The module contains a number of security issues. Cross site scripting The modul...

Ajax Short URL SQL Injection

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Ajax Short URL Script Auth Bypass SQL Injection Vulnerability =============================================================== - Discovered By: Cicklow - Date: 03.08.2009...

Ajax Short URL Script - Authentication Bypass

Ajax Short URL Script - Authentication Bypass - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script - Authentication Bypass

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login milw0rm.com 2009-08-03...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...

CVE-2009-2587

Multiple cross-site scripting XSS vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to assets/js/ddcart.php, the 2 prefix parameter to includes/ajax/getstate.php, the search parameter to 3 index.php and 4 search.php, the 5 redire...

DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

AJOX Poll - managepoll.php Authentication Bypass

AJOX Poll - managepoll.php Authentication Bypass + AJOX Poll Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://www.joxtechnology.com/view/36/PHP/MySql-AJAX-Poll-script-with-pie-and-bar-graph/ + Authentication Bypass Go t...

ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability

ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-037 June 10, 2009 -- CVE ID: CVE-2009-1528 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- Vulnerability Details:...

CVE-2009-1528

Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent,...

Memory corruption

Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent,...

CVE-2009-1528

Microsoft Internet Explorer vulnerability CVE-2009-1528 arises from improper synchronization of concurrent asynchronous XMLHttpRequest calls, leading to memory corruption and potential remote code execution. Affected products include IE 6/7 on Windows XP SP2/SP3, IE 6/7 on Server 2003 SP2, and IE...

CVE-2009-1528

Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent,...