2123 matches found
XnView 1.93.6 - .taac Local Buffer Overflow
XnView 1.93.6 - .taac Local Buffer Overflow include include / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow ...
vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting
vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied...
vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index
====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...
vBulletin 3.7.1 - Moderation Control Panel 'redirect' Cross-Site Scripting
source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
CVE-2008-2756
Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...
CVE-2008-2756
Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...
CVE-2008-2756
CVE-2008-2756 is an XSS vulnerability in the admin/users.asp page of Xigla Absolute Control Panel XE 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter (and other unspecified parameters). The available connected documents confirm the affected prod...
Cross site scripting
Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...
anatacms-admin.txt
=============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | /...
Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability
No description provided by source. =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability
Exploit for unknown platform in category web applications ============================================================== Anata CMS 1.0b5 change.php Arbitrary Add Admin Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
vbulletin-xss.txt
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
IPTBB 0.5.6 Arbitrary Add-Admin Exploit
No description provided by source. ========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
iptbb-admin.txt
========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / /...
IPTBB 0.5.6 Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ======================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ======================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
absolute-screwups.txt
www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...
PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection
PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...
CVE-2008-2458
Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...