634 matches found
CVE-2006-7009
CVE-2006-7009 affects Joomla! prior to 1.0.10. The vulnerability allows remote attackers to spoof the frontend submission forms. The provided documents describe the impact as unknown and do not specify exploit vectors or affected components beyond the frontend-form spoofing issue. There is no rem...
Enthrallweb eNews 1.0 - Remote User Pass Change
Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...
CVE-2006-5477
Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL...
CVE-2006-5477
Drupal 4.6.x (before 4.6.10) and 4.7.x (before 4.7.4) allow form submissions to be redirected via a crafted URL, which can disclose arbitrary form information to remote attackers. The description notes the vulnerable form handling and redirection, but no exploit details are provided in the connec...
DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection
A malicious user may entice users to visit a specially crafted URL that may result in the redirection of Drupal form submission to a third-party site. A user visiting the user registration page via such a url, for example, will submit all data, such as his/her e-mail address, but also possible...
Speedy ASP Forum - profileupdate.asp User Pass Change
Speedy ASP Forum - profileupdate.asp User Pass Change Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey font face="Verdana" size=...
openfaq040XSS.txt
Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...
CVE-2005-2517
Technical details about CVE-2005-2517 are not publicly available in the provided connected documents. Monitor for updates from vendor advisories; no additional affected products, impact, or fixes are disclosed here.
CVE-2005-2517
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site...
FlatNuke index.php url_avatar Field Arbitrary PHP Code Execution
The remote host is running FlatNuke, a content management system written in PHP and using flat files rather than a database for its storage. The remote version of this software has a form submission vulnerability that may allow an attacker to execute arbitrary PHP commands on the remote host...
FlatNuke < 2.5.2 Form Submission Arbitrary Script Injection
Binary data 2483.prm...
exploit in PHPBB 2010
explode: form action="" method="post" URL до форума:input type="text" name="url" size="50" value="http://www.phpbbexample.ru/forum/"br Колличество запросов:select name="select" size="1" option value="10"10/option option value="100"100/option option value="200"200/option option value="500"500/opti...
Cross-site Scripting Vulnerability in phpBB 2.0.3
Hello : here is the code ---------------- html body form method="post" name="search" action="http://target/search.php?mode=searchuser" input type="hidden" name="searchusername" value=""/ /form SCRIPT...