CVE-2007-3352

CVE-2007-3352 affects the Stephen Ostermiller Contact Form (preview form) prior to version 2.00.02. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via vectors that contain an apostrophe. The specific attack vectors are not spec...

Link Request Contact Form任意文件上传漏洞

Link Request Contact Form允许用户请求向其他站点添加自己站点的链接横幅。 Link Request Contact Form在处理文件上传时存在漏洞，远程攻击者可能利用此漏洞上传恶意脚本执行代码。 Link Request Contact Form的output.php脚本没有验证所上传文件的扩展名，因此攻击者可以上传有.php扩展名的文件然后在服务器上执行任意PHP代码。成功攻击要求在HTTP头中传送允许的MIME媒体类型。 American Financing Link Request Contact Form 3.4 American Financing...

Unrestricted file upload

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension and an image content type, as demonstrated by image/jpeg...

CVE-2007-3199

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension and an image content type, as demonstrated by image/jpeg...

CVE-2007-3199

Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension and an image content type, as demonstrated by image/jpeg...

Unfixed XSS vulnerability at www.exporters.sg

Security researcher TreX, has submitted on 06/12/2007 a cross-site-scripting XSS vulnerability affecting www.exporters.sg, which at the time of submission ranked 48264 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is currently...

Link Request Contact Form 3.4 - Remote Code Execution

Link Request Contact Form 3.4 - Remote Code Execution -=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's...

Link Request Contact Form 3.4 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ================================================================= Link Request Contact Form 3.4 Remote Code Execution Vulnerability ================================================================= -=+ Application: Link Request Contact For...

Link Request Contact Form 3.4 - Remote Code Execution

-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...

lrcf-inject.txt

-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...

CVE-2007-2579

Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...

CVE-2007-2207

CVE-2007-2207 involves a SQL injection in the Ripe Website Manager up to version 0.8.4, exploitable via the ripeformpost parameter in contact/index.php. The vulnerability allows remote attackers to manipulate SQL commands; impact details are cited as partial confidentiality/integrity/availability...

Ripe Website Manager 0.8.4 - contactindex.php?ripeformpost SQL Injection

Ripe Website Manager 0.8.4 - contactindex.php?ripeformpost SQL Injection source: https://www.securityfocus.com/bid/23597/info Ripe Website Manager Ripe Website Manager discovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager" alert1;"...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...

Comdev Contact Form 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Contact Form 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Contact Form 3.1 + Venedor ...........: http://www.comdevweb.com +...

Cross site scripting

Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...

CVE-2006-0934

Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...

CVE-2006-0934

Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...

CVE-2006-0934

CVE-2006-0934 describes a cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form. The available sources confirm the vulnerability but do not provide explicit exploit deta...

[SA18723] WEBInsta Limbo Contact Form Script Insertion Vulnerability

TITLE: WEBInsta Limbo Contact Form Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18723 VERIFY ADVISORY: http://secunia.com/advisories/18723/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WEBInsta Limbo 1.x http://secunia.com/product/4774/...