Mitridat Form Processor Pro XSS

Greetings, I have discovered cross-site scripting vulnerability in Mitridat's Form Processor Pro. http://www.mitridat.com/ http://www.mitridat.com/products-form-processor-pro.html Form Mail: Email Form Processor Pro™ - process all forms on your website Form Mail: Email Form Processor Pro is the...

husrevforum-sql.txt

husrevforum v1.0.1 SQL Injection Vuln Software: husrevforum v1.0.1 tr download: http://www.aspindir.com/goster/5020 demo: http://exmasterx.somee.com/forum Found By: GeFORC3 | G3 Exploit:...

girlserv-sql.txt

Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

CVE-2007-3517

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 index.php, 2 demo/claroline170/index.php, and possibly other scripts...

CVE-2007-3517

CVE-2007-3517 covers multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3. An attacker can inject arbitrary web script or HTML by supplying malicious content through PATH_INFO (PHP_SELF) to scripts such as index.php and demo/claroline170/index.php (and potentially other scripts)...

b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities

No description provided by source. b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/...

b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= b1gbb 2.24.0 SQL Injection / XSS Remote Vulnerabilities ========================================================= b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script :...

Pharmacy System 2.0 (index.php ID) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Pharmacy System v2 AND PRIOR SQL INJECTION VULNERBILITYS +==-- --==+================================================================================+==-- AUTHOR:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...

CVE-2007-3170

Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...

CVE-2007-3171

Affected software/impact: Uebimiau Webmail is vulnerable to information disclosure. The issue occurs in the demo/pop3/error.php script when an invalid value is supplied for the smarty or selected_theme parameter, which causes error messages to reveal the installation path. Root cause (as describe...

CVE-2007-3170

CVE-2007-3170 relates to multiple XSS vulnerabilities in UebiMiau Webmail. The affected component is the webmail PHP application, with two identified vectors: (1) PATH_INFO to redirect.php and (2) the selected_theme parameter to demo/pop3/error.php. The underlying issue is insufficient sanitizati...

geometrix-sql.txt

Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln. Password:/downindir.asp?id=-1+union+select+0,1,adminsifre,3,4,5,6,7+from+ayarlar Admin Login :...

CVE-2007-3171: Undefined Security Weakness

Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the 1 smarty or 2 selectedtheme parameter, which reveals the path in various error messages...

CVE-2007-3172: Undefined Security Weakness

Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the existence of arbitrary directories via an absolute pathname and .. dot dot in the selectedtheme parameter...

GeometriX Download Portal (down_indir.asp id) SQL Injection Vuln

No description provided by source. Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

GeometriX Download Portal - down_indir.asp?id SQL Injection

GeometriX Download Portal - downindir.asp?id SQL Injection Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

PT-2007-4294 · Salescart · Salescart Shopping Cart

Name of the Vulnerable Software and Affected Versions: SalesCart Shopping Cart affected versions not specified Description: The issue concerns SQL injection vulnerabilities in the cgi-bin/reorder2.asp file of SalesCart Shopping Cart, allowing remote attackers to execute arbitrary SQL commands via...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

No description provided by source. !-- IE6 / Provideo Camimage class ISSCamControl.dll 1.0.1.5 remote seh overwrite exploit / win2k sp4 tried the SD-222VPRO camera series,you can reach an online demo here: http://www.provideo.com.tw/security%20live%20demo.htm rgod -- HTML...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== IE6 / Provideo Camimage ISSCamControl.dll 1.0.1.5 Remote BoF Exploit ====================================================================== REM metasploit one, add a use...