Unfixed XSS vulnerability at billdouglas.ex.ac.uk

Security researcher CCC, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting billdouglas.ex.ac.uk, which at the time of submission ranked 26741 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is current...

Unfixed XSS vulnerability at atlasmuren.se

Security researcher Uber0n, has submitted on 25/05/2008 a cross-site-scripting XSS vulnerability affecting atlasmuren.se, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Unfixed XSS vulnerability at www.stragi.it

Security researcher s3rg3770, has submitted on 16/05/2008 a cross-site-scripting XSS vulnerability affecting www.stragi.it, which at the time of submission ranked 3787988 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is current...

Unfixed XSS vulnerability at www.pickuppal.com

Security researcher Mystick, has submitted on 05/12/2008 a cross-site-scripting XSS vulnerability affecting www.pickuppal.com, which at the time of submission ranked 202345 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/01/2009. It is...

Unfixed Redirect vulnerability at www.portslock.com

Security researcher holisticinfosec, has submitted on 29/04/2008 a Redirect vulnerability affecting www.portslock.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently unfixed...

Unfixed XSS vulnerability at www.theoceans.net

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.theoceans.net, which at the time of submission ranked 1749749 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...

Code injection

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID...

CVE-2008-1627

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID...

CVE-2008-1627

CVE-2008-1627 affects CDS Invenio 0.92.1 and earlier. The issue allows remote authenticated users to delete email notification alerts of arbitrary users by modifying an internal UID. This is the explicit vulnerability described in the connected CVE records. The documents do not provide a remediat...

Unfixed XSS vulnerability at www.sha1.info

Security researcher Xbox2002, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.sha1.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is currently...

ClipShare 2.6 - Remote User Password Change

ClipShare 2.6 - Remote User Password Change !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User...

Unfixed XSS vulnerability at www.ufukhalisaha.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.ufukhalisaha.com, which at the time of submission ranked 3256534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It i...

"Forgot password" function allows easy misuse

The "Forgot password" function invents a new password and sends it by email. This invites to misuse as guessing the userid already allows to annoy or even lock-out the legitimate account owner. The user may currently not have access to his email account or the mail could be killed by a spam filte...

Unfixed Redirect vulnerability at www.zeybekler.net

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting www.zeybekler.net, which at the time of submission ranked 352214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.motour.ch

Security researcher Narcoticxs, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.motour.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at tickets.carrenza.net

Security researcher BackDoor, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting tickets.carrenza.net, which at the time of submission ranked 2542088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2007. It is...

Unfixed XSS vulnerability at c2ch.glorious.mine.nu

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting c2ch.glorious.mine.nu, which at the time of submission ranked 1455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/09/2007. It i...

Unfixed XSS vulnerability at portalavisos.com.ar

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting portalavisos.com.ar, which at the time of submission ranked 10006830 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/10/2007. It is...

Unfixed XSS vulnerability at www.turgutuzer.com

Security researcher Narcoticxs, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.turgutuzer.com, which at the time of submission ranked 3557301 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is...

Unfixed XSS vulnerability at www.fulldisclosure.net

Security researcher Mutant, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting www.fulldisclosure.net, which at the time of submission ranked 4460831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...