CVE-2011-4827: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AutoSec Tools V-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 p parameter to redirect.php and 2 box parameter to includes/TrueColorPicker/index.php, which is not properly handled in...

Drive Heads Compilation - Music Tracks on Box

Document Title: =============== Drive Heads Compilation - Music Tracks on Box References: =========== Download: http://www.vulnerability-lab.com/resources/videos/357.wmv View: http://www.youtube.com/watch?v=R-xLz59W0Ng Release Date: ============= 2011-12-13 Vulnerability Laboratory ID VL-ID:...

Hrithikrules.com Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: www.hrithikrules.com XSS vulnerability Date: 12/12/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : ©2010 HrithikRules.com site info : Hrithikrules is the...

CVE-2010-5031

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5031

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5027

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026

The vulnerability described across sources is a SQL injection in the Scientific project Science Fair In A Box (SFIAB), specifically in winners.php for versions 2.0.6 and 2.2.0. The root cause is unsanitized input in the type parameter, enabling remote attackers to execute arbitrary SQL commands. ...

CVE-2010-5027

The CVE-2010-5027 entry concerns a Cross-site scripting (XSS) vulnerability in the winners.php component of Science Fair In A Box (SFIAB) versions 2.0.6 and 2.2.0. The attack vector involves the type parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Sc...

CVE-2010-5031

CVE-2010-5031 is a cross-site scripting (XSS) vulnerability in fileNice 1.1, affecting index.php via the sstring parameter (Search Box). Concrete details found: the vulnerability is XSS with arbitrary script/HTML injection possible through sstring. Affected component is fileNice 1.1 (index.php). ...

PT-2011-1961

Name of the Vulnerable Software and Affected Versions Science Fair In A Box SFIAB versions 2.0.6 through 2.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the winners.php file. Recommendations For versions 2.0.6 throu...

PT-2011-1962

Name of the Vulnerable Software and Affected Versions Science Fair In A Box SFIAB versions 2.0.6 through 2.2.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the type parameter in...

CVE-2010-5027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5026: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in winners.php in Science Fair In A Box SFIAB 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information...

PT-2011-1966

Name of the Vulnerable Software and Affected Versions fileNice version 1.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the sstring parameter, also known as the Search Box. Recommendations For fileNice version 1.1, avoid...