Cross site scripting

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4985

Cross-site scripting XSS vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box...

CVE-2010-4984

SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...

CVE-2010-4976

The CVE-2010-4976 issue affects MetInfo 3.0, specifically the search/search.php handler. The vulnerability arises in the searchword parameter (the Search Box field), enabling remote attackers to inject arbitrary web script or HTML (classic XSS). The description notes that details are from third-p...

Facebook My Phrase Box SQL Injection

Title: ====== Facebook My Phrase Box - SQL Injection Vulnerability Date: ===== 2011-10-16 VL-ID: ===== 288 Introduction: ============= The application is currently included and viewable by all facebook users. The service is an external 3rd party application sponsored by the My Phrase Box. Copy fr...

The use of the overflow extension to SQL injection-vulnerability warning-the black bar safety net

Transfer from: spring brother Looking at the hack in the box magazine, see an article on the combination of overflow way to expand theSQL injectionattack tactics article, so in the blog mark, a record. I had previously mentioned in conjunction with overflow toXSSthe methodand the idea is somewhat...

WordPress ThemeCity Cross Site Scripting

Exploit Title: WP ThemeCity XSS Date: 21.10.2011 - 19.05 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Windows xp sp3 Platform: Php Demo : http://www.steveledwards.com/ Search Box "alert"DDz Mr.PaPaRoSSe"...

Dominant Creature BBG/RPG Browser Game - Persistent Cross-Site Scripting

=================================================================================== Dominant Creature BBG/RPG browser game XSS vulnerabilities =================================================================================== Exploit Title: Dominant Creature BBG/RPG browser game XSS...

HITB Quartal Magazine - eZine Issue 007

Document Title: =============== HITB Quartal Magazine - eZine Issue 007 References: =========== Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-007.pdf Article: https://magazine.hitb.org/ Mirror: https://www.vulnerability-lab.com/resources/documents/297.pdf Article:...

Facebook My Phrase Box - SQL Injection Vulnerability

Document Title: =============== Facebook My Phrase Box - SQL Injection Vulnerability Release Date: ============= 2011-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 288 Product & Service Introduction: =============================== The application is currently...

Sparkasse Bank – Tricky Card Bug on ATM [ATM Adventure]

Document Title: =============== Sparkasse Bank – Tricky Card Bug on ATM ATM Adventure References: =========== Document: http://www.vulnerability-lab.com/resources/documents/295.pdf Article: http://www.vulnerability-lab.com/dev/?p=247 Release Date: ============= 2011-10-15 Vulnerability Laboratory...

Google Chrome < 14.0.835.202 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 14.0.835.202. It therefore is potentially affected by the following vulnerabilities : - Use-after-free errors exist that are related to text line box handling and the v8 JavaScript engine bindings. CVE-2011-2876,...

CVE-2011-2876

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

Design/Logic Flaw

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

CVE-2011-2876

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

CVE-2011-2876

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

CVE-2011-2876

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

CVE-2011-2876

Removed by vendor...

CVE-2011-2876: Use After Free

Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box...

PT-2011-4162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.202 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving a text line box. Recommendations For versions...