security flaw

Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control...

Alert! A web page malicious script effects code summary Delivery-vulnerability warning-the black bar safety net

The following code is only for study and research use, please do not use the deceased person, resulting in loss of I am not responsible for, Thank you! 1, format the hard disk object id="scr" classid="clsid:06290BD5-48AA-11D2-8 4 3 2-006008C3FBFC" /object script scr. Reset; scr...

youtube.txt

Youtube.com Homepage: http://www.youtube.com Affected files: Search box input Adding a new blog: - Blog name XSS Vuln with cookie disclosure via search box: Data isn't sanatized when using the search box. For PoC input: PoC link:...

newscientist.txt

We from Black Box Magazine - Underground Inet-Security Research -- http://bboxnet.mine.nu found Cross Site Scripting Vuln in http://www.newscientist.com/ Write this example in Search: "...

dealgates.txt

Dealgates.com Homepage: http://www.dealgates.com Affected files: Input boxes when registering new account Search box ------------------------------------- XSS vuln with cookie disclosure when registering a new account. To bypass the adding backslashes to ; and ", we use the long UTF-8 unicode of ...

blacksingles.txt

Blacksingles.com Homepage: http://www.blacksingles.com Affected files Profile input boxes Add a friend input box. list.html view.html reply.html compose.html ------------------------------------------------- XSS vuln with cookie disclosure via the Location box. User data isn't sanatized before...

about.txt

About.com Homepage: http://www.about.com Effected files: Search input box fullsearch.htm shortform.htm forum.aspx profilecenter.asp posting in the forum ----------------------------------- Search input box xss vuln with cookie disclosure: Works by putting the tags in the input box, or doing url...

CVE-2006-3071

Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...

CVE-2006-3033

Cross-site scripting XSS vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Cross site scripting

Cross-site scripting XSS vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

DEBIAN-CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

Cross site scripting

Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...

CVE-2006-2673

Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...

CVE-2006-1729

Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by 1 inserting the target filename into a text box, then turning that box into a file upload control, or 2 changing the type of the...

musicBoxXSS.txt

Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='alertdocument.cookie http://example.com/music/index.php?action=top&show=5&type='alertdocument.cookie...

PHPLiveHelper 1.8 remote command execution (include) Xploit (perl)

Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...

XSS & SQL Injection in Music Box v2.3

Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...