bcoos-sqlxss.txt

Bcoops SQL injection and Cross-site scripting vendor url: http://www.bcoops.net Advisore: http://lostmon.blogspot.com/2007/11/ bcoops-sql-injection-and-cross-site.html vendor notify:YES exploits available: YES bcoos is content-community management system written in PHP-MySQL. bcoops contains a fl...

windowslive-remote.txt

Windows live Messenger malformed file overflow remote exploitation. windows ole32.dll ms07-024 windows GDI MS07-046 vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview Advisore: http://lostmon.blogspot.com/2007/09/ windows-live-messenger-jpg-overflow.html Vendor...

vikingboard-xss.txt

Vikingboard multiple Cross site scripting Vendor url: http://vikingboard.com/ advisore:http://lostmon.blogspot.com/2007/07/ vikingboard-multiple-cross-site.html vendor notify:yes exploit include:yes Vikingboard is a PHP-based community board designed by the principle of "less is more", and featur...

netflow-xss.txt

NetFlow Analizer 5 & OpManager 7 multiple XSS vendor url:http://www.adventnet.com/ advisore:http://lostmon.blogspot.com/2007/07/ netflow-analizer-5-opmanager-7-multiple.html vendor notify:yes exploits include:yes NetFlow Analizer and OpManager contains a flaw that allows a remote cross site...

CPS <=3.4.0 XSS

CPS =3.4.0 XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.cps-project.org/ affected versions:3.4.0 and prior orginal avdisory: http://pridels.blogspot.com/2006/04/cps-340-xss.html Vuln. Description: CPS contains a flaw that allows a remote cross site scripting attack. Thi...

Pinnacle Cart XSS

Pinnacle Cart XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.pinnaclecart.com/ affected versions:3.33 and prior orginal advisory:http://pridels.blogspot.com/2006/04/pinnacle-cart-xss.html Vuln. Description: Pinnacle Cart contains a flaw that allows a remote cross site...

vBulletin 3.5.x vBug Tracker XSS vuln.

vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...

Mantis XSS vuln.

Mantis XSS vuln. Vuln. discovered by : r0t Date: 31 march 2006 vendor:http://www.mantisbt.org/ affected versions:Mantis 1.0.1 and 1.0.0rc5 and prior orginal advisory:http://pridels.blogspot.com/2006/03/mantis-xss-vuln.html Vuln. Description: Mantis contains a flaw that allows a remote cross site...

phpCOIN v1.2.2 XSS vuln.

phpCOIN v1.2.2 XSS vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.phpcoin.com/ affected versions:V.1.2.2 and prior orginal advisory:http://pridels.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html Vuln. Description: phpCOIN contains a flaw that allows a remote cross site...

classifiedZONE v1.2 XSS vuln.

classifiedZONE v1.2 XSS vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.fusionzone.com/applications/classifieds/ affected versions:v.1.2 and prior Vuln. Description: classifiedZONE contains a flaw that allows a remote cross site scripting attack. This flaw exists because inp...

Metisware Instructor XSS vuln.

Metisware Instructor XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.metisware.com/ affected versions:1.3 and prior orginal advisory: http://pridels.blogspot.com/2006/03/metisware-instructor-xss-vuln.html Vuln. description: Instructor contains a flaw that allows a remote...

SweetSuite.NET - ssCMS 2.1.x XSS vuln.

SweetSuite.NET - ssCMS 2.1.x XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: www.sweetsuite.net/ssCMSMain.aspx affected versions: 2.1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html Vuln. Description: ssCMS contains a flaw th...

XSS in <= Toast Forums 1.6

XSS in = Toast Forums 1.6 Vuln. discovered by : r0t Date: 25 march 2005 vendor:http://www.toastforums.com/ affected versions: 1.6 and prior orginal advisory: http://pridels.blogspot.com/2006/03/xss-in-toast-forums-16.html Vuln. Description. Toast Forums contains a flaw that allows a remote cross...

Fatwire UpdateEngine 6.2 multiple XSS vuln.

Fatwire UpdateEngine 6.2 multiple XSS vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html vendor:http://www.fatwire.com/ affected version:6.2 and prior Product Description: UpdateEngine6 is a dynamic...

Magnolia XSS vuln.

Magnolia XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/magnolia-xss-vuln.html vendor:http://www.magnolia.info affected version:2.1 and prior Product Description: Magnolia is the free, open source, J2EE deployable content management...

ScareCrow Message Board XSS vuln.

ScareCrow Message Board XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html vendor:http://scarecrow.sourceforge.net/ affected version:2.13 and prior Product Description: ScareCrow is a fully featured and...

PHP JackKnife XSS vuln.

PHP JackKnife XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/php-jackknife-xss-vuln.html vendor:http://www.phpjk.com/ affected version: 2.21 and prior Product Description: PHP JackKnife is an easily set-up, fast, feature-rich photo galle...

rwAuction Pro v4.0 XSS vuln.

rwAuction Pro v4.0 XSS vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/rwauction-pro-v40-xss-vuln.html vendor:www.rainworx.com/auctionsoftware.asp?ref=hs1 affected version:rwAuction Pro v4.0 and prior Product Description: rwAuction Pro is a...

TeeKai Tracking Online XSS

The remote host runs Teekai Tracking Online, a PHP script used for tracking the number of user's on a Web site. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. OpenVAS...

Skull-Splitter Guestbook Multiple HTML Injection Vulnerabilities

The remote host is running the Skull-Splitter guestbook, a guestbook written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks. Inserting special characters into the subject or message content can cause arbitrary code execution for third party users, thus...