Cross site scripting

Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1374

Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1374: Undefined Security Weakness

Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1374

This entry documents a Cross-site scripting (XSS) vulnerability in Snitz Forums 2000, version 3.4.06, specifically in the pop_profile.asp component where an attacker can inject arbitrary script or HTML via the MSN parameter. The vulnerability is described consistently across CVE and NVD sources, ...

webspell40-multi.txt

WebSpell Authentication Bypass and arbitrary code execution Vendor : WebSpell URL : http://www.webspell.org/ Version : All Risk : SQL Injection, unchecked file upload Description: webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like...

JBrowser acces to admin/config files

JBrowser acces to admin/config files By : sn0oPy Risk : high Dork : inurl:"JBrowser/index.php" exploit : juste replace the http://www.target.ma/jbrowser/index.php by http://www.target.ma/jbrowser/admin/ contact : [email protected] greetz : subzero, Avg...

Sql injection

SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1023

SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1023

The CVE-2007-1023 entry concerns Snitz Forums 2000, version 3.1 SR4, where pop_profile.asp is vulnerable to SQL injection via the id parameter. This allows remote attackers to execute arbitrary SQL commands. The provided documents do not include explicit remediation steps or patched versions. No ...

CVE-2007-1023

SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1023: Undefined Security Weakness

SQL injection vulnerability in popprofile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Snitz Forums 2000 Version 3.1 SR4 (pop_profile.asp) Remote SQL Injection Vulnerability

=================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info - xoron.biz...

Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability

No description provided by source. =================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info -...

Snitz Forums 2000 3.1 SR4 - pop_profile.asp SQL Injection

Snitz Forums 2000 3.1 SR4 - popprofile.asp SQL Injection =================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bula...

Snitz Forums 2000 v3.1 SR4 (pop_profile.asp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Snitz Forums 2000 v3.1 SR4 popprofile.asp SQL Injection Vulnerability ========================================================================...

Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection

=================================X=O=R=O=N================================= Snitz Forums 2000 Version 3.1 SR4 popprofile.asp Remote SQL Injection Vulnerability =================================X=O=R=O=N================================= Bulan: xoron xoron.info - xoron.biz...

CVE-2007-0830

Multiple cross-site scripting XSS vulnerabilities in the Admin Control Panel AdminCP in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the 1 User Group Manager, 2 User Rank Manager, 3 User Title Manager, ...

CVE-2007-0830

Multiple cross-site scripting XSS vulnerabilities in the Admin Control Panel AdminCP in Jelsoft vBulletin 3.6.4 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors related to the 1 User Group Manager, 2 User Rank Manager, 3 User Title Manager, ...

VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability

VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker could exploit this vulnerability to have arbitrary script code execute in the...

PT-2007-2273 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.6.4 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Admin Control Panel AdminCP of vBulletin. These vulnerabilities allow remote authenticated administrators to inject arbitrary web...