Exteen Blog XSS Remote Cookie Disclosure Exploit

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 uid Blind SQL Injection Vulnerability =================================================================== ::e107 Plugin BLOG Engine v2.2...

exteen-disclose.txt

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

e107 Plugin BLOG Engine 2.2 - 'uid' Blind SQL Injection

::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection ::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all...

Movable Type session management vulnerability

Overview Movable Type, a web log system from Six Apart KK, contains a vulnerability which could allow a remote attacker to gain illegal access. Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution None...

a-blog cross-site scripting vulnerability

Overview a-blog, a server-based blog tool from appleple, Inc. contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution None...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

No description provided by source. + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, a...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 rid Blind SQL Injection Vulnerability =================================================================== + Author: Saime + Script: e107 Plugin...

e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection

Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot! + Site:...

e107 Plugin BLOG Engine 2.2 - rid Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - rid Blind SQL Injection + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz:...

Unfixed XSS vulnerability at rdfinewine.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting rdfinewine.com, which at the time of submission ranked 8065978 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is current...

Unfixed XSS vulnerability at djantwan.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting djantwan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is currently...

Vulnerability in Multiple Web Application

I found a link about some web applications vulnerability. 1. Chicomos CMS Configuration File Disclosoure 2. Zomplog 3.8.2 Blog Engine Arbitrary Files Download/Disclosoure 3. Wheatlog Blog Engine Auto Create User See below http://kandangjamur.net/tutorial/multiple-application.txt...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

miniweb-sql.txt

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Miniweb 2.0 historymonth Remote SQL Injection Vulnerability ============================================================= Rem0te SQL Injection Vulnerability Miniweb 2.0 index.ph...

Miniweb 2.0 - 'historymonth' SQL Injection

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

DSA-1568-1 b2evolution - cross site scripting

Bulletin has no description...

core-sql.txt

Core Impulse SQL Injection vulnerability Vendor site: www.coreimpulse.com discovered by: e.wiZz! Dork: inurl:/products/listProducts.php?cat or inurl:listProducts.php?cat Exploit: http://www.somesite.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+username,2,3+FROM+users/...