PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability

PHP iCalendar = 2.24 - Cross-Site Scripting Vulnerability Download: http://phpicalendar.net/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by P...

phpical-xss.txt

PHP iCalendar alertdocument.cookie //---------------------------------------\ Greetz To: All Hackers Jose Luis Góngora Fernández / JosS!...

PHPkit 1.6.1 (include.php?path=) Remote File Inclusion

PHPkit 1.6.1 include.php?path= Remote File Inclusion Download: http://www.webmasternet.de/ Bug found by Jose Luis Gongora Fernandez / JosS! Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "PHPKIT Version 1.6.1" Stop...

Gekko <=0.8.2 (temp directory) Path Disclosure

Gekko =0.8.2 temp directory Path Disclosure Download: http://www.gekkoware.org/ Bug found by JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by Gekko" Stop lammer sensitive...

phpkit-rfi.txt

PHPkit 1.6.1 include.php?path= Remote File Inclusion Download: http://www.webmasternet.de/ Bug found by Jose Luis Góngora Fernández / JosS! Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "PHPKIT Version 1.6.1" Stop...

phpslideshow0992-xss.txt

Vendor Site: http://www.zinkwazi.com/wp/scripts/ Version affected: 0.9.9.2 URL:http://www.example.com/scripts/demo/phpslideshow.php?directory=photos BID ref: 26576 By Jose Luis Góngora Fernández PHPSlideShow is also susceptible the following inputs:...

simplegallery-xss.txt

SimpleGallery v0.1.3 index.php Cross-Site Scripting Vulnerability Download: http://richie.7crows.net/projects/gnu/simpleGallery/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure...

JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability

JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo20System/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...

jlmforo-xss.txt

JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo%20System/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...

FMDeluxe (index.php) Cross-Site Scripting Vulnerability

FMDeluxe index.php Cross-Site Scripting Vulnerability Download: http://fmdeluxe.com/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered By FMDeluxe" Stop lammer...

phpslideshow-xss.txt

PHPSlideShow toonchapter8.php Cross-Site Scripting Vulnerability Download: http://fmdeluxe.com/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by PHPSlideShow"...

fmdeluxe-xss.txt

FMDeluxe index.php Cross-Site Scripting Vulnerability Download: http://fmdeluxe.com/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered By FMDeluxe" Stop lammer...

FIGIS (FILogin.do) Bypass SQL Injection Vulnerability

FIGIS FILogin.do Bypass SQL Injection Vulnerability Download: Not Available Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "accionado por FIGIS" / "powered by FIGIS" Sto...

PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability

PHPSlideShow toonchapter8.php Cross-Site Scripting Vulnerability Download: http://fmdeluxe.com/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by PHPSlideShow"...

Ubuntu 6.06 LTS / 6.10 : mono vulnerability (USN-397-1)

Jose Ramon Palanco discovered that the mono System.Web class did not consistently verify local file paths. As a result, the source code for mono web applications could be retrieved remotely, possibly leading to further compromise via the application's source. Note that Tenable Network Security ha...

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Gngora Fernndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz" Sto...

Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability

Stringbeans Portal - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.nabh.com/projects/sbportal Bug found by JosS / Jose Luis Gngora Fernndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk:...

xcomputer-xss.txt

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Góngora Fernández Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz"...

WzdFTPD < 8.1 Denial of service

S21Sec Advisory - Title: WzdFTPD Denial of Service ID: S21SEC-033-en Severity: Medium - Denial of Service History: 26.Dic.2006 Vulnerability discovered 8.Ene.2007 Vendor contacted Scope: FTP Server Denial of Service Platforms: Any Author: Jose Miguel Esparza [email protected] URL:...

Mono XSP ASP.NET Server sourcecode disclosure vulnerability

Mono XSP ASP.NET Server sourcecode disclosure vulnerability Version: Tested on mono 1.2.1 XSP for ASP.NET 1.1 and 2.0 This is a regression as this issue didn't exists in Mono 1.0 Discovered by: Jose Ramon Palanco: jose.palancoateazeldotes http://www.eazel.es Time Line: Nov 29, 2006: Discovered...