aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. - Discovered bay AleminKrali ==== - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com...

HP System Management Homepage (SMH) 'message.php'跨站脚本漏洞

BUGTRAQ ID:30846 CNCAN ID：CNCAN-2008082702 HP System Management Homepage是一款HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用于显示通用错误消息的输入参数，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息。 漏洞影响"message.php"脚本，此页面使用JavaScript属性"location.search"用于建立错误消息，如URL中提供的错误ID不匹配任何合法的代码，通用错误会报告"An unknown error %INVALIDCODE%...

HPSystem Management Homepage (SMH) 2.1.12 - message.php Cross-Site Scripting

HPSystem Management Homepage SMH 2.1.12 - message.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting...

HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a...

DeeEmm CMS (DMCMS) 0.7.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== DeeEmm CMS DMCMS 0.7.4 Multiple Remote Vulnerabilities ======================================================== DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr...

Ethereal 10.x AFP Protocol Dissector Remote Format String Exploit

No description provided by source. / etherealv0.10.: AFP remote format string exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xethereal-afp-fmt.c -o xethereal-afp-fmt ethereal homepage/url: http://www.ethereal.com syntax: ./xethereal-afp-fmt -spSrPanc -h host vulnerable...

[SECURITY] Fedora 9 Update: licq-1.3.5-2.fc9

Licq is a ICQ Client for the common ICQ network. It provides a graphical user interface based on QT and is enhanceable with many powerful plugins. For more information visit Licq's Homepage http://www.licq.org...

HP System Management Homepage < 2.1.12 Unspecified XSS

The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...

Siteframe CMS 3.2.3 - 'folder.php' SQL Injection

SQL-Injection in Siteframe CMS all versions Author: n0ne E-Mail: [email protected] Vulnerable script: folder.php Vulnerable var: id CMS Homepage: http://www.siteframe.org Exploit PoC: http://www.target.com/folder.php?id=370+and1=2+union+select+1,2,3,4,5,6,7,8,concatws0x3a,useremail,userpasswd,10,...

CVE-2008-1663

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-1663

HP System Management Homepage (SMH) versions 2.1.10 and 2.1.11 on Linux and Windows are vulnerable to cross-site scripting (XSS) via unspecified vectors, allowing remote attackers to inject arbitrary script/HTML. The underlying issue is an XSS vulnerability in SMH that lacks details about input h...

Linux和windows平台下的HP System Management Homepage (SMH)跨站脚本漏洞

BUGTRAQ ID: 30029 CVE ID：CVE-2008-1663 CNCVE ID：CNCVE-20081663 HP System Management Homepage是HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 可联系供应商获得补丁信息：...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== ASPPortal Free Version TopicId Remote SQL Injection Vulnerability ==================================================================== + Info: Bug found by JosS EspSeC &...

CVE-2008-2231

SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to execute SQL commands and read table information via the id parameter...

bpblog-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 AND SELECT Count FROM tblauthor = 0...

Homepage Builder sample CGI programs vulnerable to OS command injection

Overview Some of the CGI sample programs included in Homepage Builder provided by IBM Japan contains a vulnerability which may allow an attacker to inject an arbitrary OS command. According to the vendor, it is confirmed that vulnerable CGI sample programs are not included in the demo versions of...

HP System Management Homepage cross-site scripting vulnerability

Overview A cross-site scripting vulnerability exists in Hewlett-Packard HP System Management Homepage SMH. HP System Management Homepage SMH from Hewlett-Packard is a web-based interface that can manage HP servers. A cross-site scripting vulnerability exists in SMH. It is also confirmed that Comp...

PerlMailer cross-site scripting vulnerability

Overview PerlMailer is a mail form CGI provided by "Homepage Decorator". A cross-site scripting vulnerability exists in PerlMailer. PerlMailer is a mail form CGI provided by "Homepage Decorator". It is used to send mail from a form on a web page. A cross-site scripting vulnerabiltiy exists in...

Various invasion of the batch-a vulnerability warning-the black bar safety net

First:let others memory OVERforce him to restart @echo off start cmd %0 On this 3 lines. Second:let the other party to restart the specified number of timesvictim-specific @echo off if not exist c:\1.txt echo. c:\1.txt & goto err1 if not exist c:\2.txt echo. c:\2.txt & goto err1 if not exist...