CVE-2010-1629

Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Limny < 2.01 Multiple CSRF Vulnerabilities

Limny is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ollydbg 2.00 Beta Local Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== Ollydbg 2.00 Beta Local Overflow Exploit ======================================== Exploit: Ollydbg 2.00 Beta Local Overflow Exploit Author : r45c4l Taken from thr original advisory published by "SuBz3...

vBulletin 3.5.2 - Cross-Site Scripting

vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...

Facebook For iPhone Cross Site Scripting

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

CVE-2009-4467

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...

Deserialization of untrusted data

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...

Text Exchange Pro - [ CSRF ] Create Administrator Account

Exploit for unknown platform in category web applications ========================================================= Text Exchange Pro - CSRF Create Administrator Account ========================================================= Title: Text Exchange Pro - CSRF Create Administrator Account Date:...

phpCollegeExchange 0.1.5c SQL Injection

PoC - phpCollegeExchange 0.1.5c SQL Injection - Salvatore Fresta aka Drosophila This code will print the columns number found by the injection. In order to view the content of the fields, you must exchange the number with the field name, adding a FROM tablename at the end of the injection query...

phpCollegeExchange 0.1.5c - Multiple SQL Injections

phpCollegeExchange 0.1.5c - Multiple SQL Injections phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities ================================================================ phpCollegeExchange 0.1.5c Multiple SQL...

[SECURITY] Fedora 12 Update: php-pear-Mail-1.1.14-5.fc12

PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...

VisionLMS 1.0 (changePW.php) Remote Password Change Exploit

No description provided by source. html head titleVisionLMS 1.0 | Change Password/title p VisionLMS 1.0 Remote Password Changebr Coded by Mr.tro0oqybr E-mail [email protected] --- Yemeni hackerbr Greetz All my Friendsbr /p form enctype="multipart/form-data" method="post" name="form"...

Hot Project 7 SQL Injection

-------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...

CVE-2009-0969

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

CVE-2009-0969: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...

Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability

Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...