Agares Media ThemeSiteScript 1.0 - loadadminpage Remote File Inclusion

Agares Media ThemeSiteScript 1.0 - loadadminpage Remote File Inclusion source: https://www.securityfocus.com/bid/26998/info ThemeSiteScript is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

Unfixed XSS vulnerability at www.easy888.com

Security researcher meloulisi, has submitted on 24/12/2007 a cross-site-scripting XSS vulnerability affecting www.easy888.com, which at the time of submission ranked 507349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/12/2007. It is...

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion --==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==--...

MMSLamp (idpro) Remote SQL Injection Vulnerability

No description provided by source. Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Page : http://www.brand039.com/?service=prodottidettaglio&idpro=4 Date : 22/12/2007 Bug in : default.php PoC :...

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

--==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==-- --==+=============================================================================+==-- Software: Joomla Component mosDirectory 2.3.2 exploit...

MMSLamp (idpro) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== MMSLamp idpro Remote SQL Injection Vulnerability ================================================== Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Date : 22/12/2007 Bug in :...

MMSLamp - 'idpro' SQL Injection

Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Page : http://www.brand039.com/?service=prodottidettaglio&idpro=4 Date : 22/12/2007 Bug in : default.php PoC : http://site.com/default.php?service=prodottidettaglio&idpro=SQL Example:...

Unfixed XSS vulnerability at www.hentai-top100.com

Security researcher TreX, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.hentai-top100.com, which at the time of submission ranked 9847 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.soft82.com

Security researcher tenest, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.soft82.com, which at the time of submission ranked 23991 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

Unfixed XSS vulnerability at www.i0573.com

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.i0573.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

Unfixed Redirect vulnerability at www.animal365.com

Security researcher TreX, has submitted on 21/12/2007 a Redirect vulnerability affecting www.animal365.com, which at the time of submission ranked 18994 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently unfixed. If you...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

Unfixed XSS vulnerability at www.sz3721.com

Security researcher DerickTham, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.sz3721.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...

Dokeos 1.8.4 - Arbitrary File Upload

Dokeos 1.8.4 - Arbitrary File Upload Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 © 2007...

Easylon OPC Server任意代码执行漏洞

BUGTRAQ ID: 26876 CVE ID:CVE-2007-4473 CNCVE ID:CNCVE-20074473 OLE for Process Control OPC是一款用于进程控制和制造业使用的标准OLE COM对象集规 格。OPC servers是OPC实现的服务程序。 Easylon OPC Server不正确验证服务处理，远程攻击者可以利用漏洞未授权访问服务器OPC 接口。 攻击者可以借此访问Easylon OPC Server执行任意代码或进行拒绝服务攻击，目前没有详细 漏洞细节提供。 Gesytec GmbH Easylon OPC Server 2.30.3...

PhpMyDesktopArcade 1.0 Final - phpdns_basedir Remote File Inclusion

PhpMyDesktopArcade 1.0 Final - phpdnsbasedir Remote File Inclusion Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powere...

Unfixed XSS vulnerability at www.starvip88.com

Security researcher DerickTham, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.starvip88.com, which at the time of submission ranked 367992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is...

Unfixed XSS vulnerability at www.pure18.com

Security researcher TreX, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.pure18.com, which at the time of submission ranked 16365 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently...

Unfixed XSS vulnerability at www.jahanmp3.com

Security researcher TreX, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.jahanmp3.com, which at the time of submission ranked 82274 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is currently...

Unfixed XSS vulnerability at www.jahanmp3.com

Security researcher TreX, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.jahanmp3.com, which at the time of submission ranked 82274 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is currently...