Cross site scripting

Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-4995: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Comdev One Admin SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ Comdev One Admin SQL Injection Vulnerability ============================================ Author: farzin0123pianist Version: possible all versions Description : Dork : "Powered by Comdev One Admin o...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...

Phorum Cross-Site Scripting Vulnerability

This host is running Phorum and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphorumxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Phorum Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Cross site scripting

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629

Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...

CVE-2010-1629

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

CVE-2010-1629: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Limny < 2.01 Multiple CSRF Vulnerabilities

Limny is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ollydbg 2.00 Beta Local Overflow Exploit

Exploit for unknown platform in category local exploits ======================================== Ollydbg 2.00 Beta Local Overflow Exploit ======================================== Exploit: Ollydbg 2.00 Beta Local Overflow Exploit Author : r45c4l Taken from thr original advisory published by "SuBz3...

vBulletin 3.5.2 - Cross-Site Scripting

vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...

Facebook For iPhone Cross Site Scripting

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

CVE-2009-4467

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...

Deserialization of untrusted data

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...

Text Exchange Pro - [ CSRF ] Create Administrator Account

Exploit for unknown platform in category web applications ========================================================= Text Exchange Pro - CSRF Create Administrator Account ========================================================= Title: Text Exchange Pro - CSRF Create Administrator Account Date:...

phpCollegeExchange 0.1.5c SQL Injection

PoC - phpCollegeExchange 0.1.5c SQL Injection - Salvatore Fresta aka Drosophila This code will print the columns number found by the injection. In order to view the content of the fields, you must exchange the number with the field name, adding a FROM tablename at the end of the injection query...

phpCollegeExchange 0.1.5c - Multiple SQL Injections

phpCollegeExchange 0.1.5c - Multiple SQL Injections phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities ================================================================ phpCollegeExchange 0.1.5c Multiple SQL...