7646 matches found
ZeeJobsite v3x - PHP Job Portal XSS Attack Vulnerability
No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + ZeeJobsite v3x XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage : www.ssteam.ws...
ZeeJobSite 3x Cross Site Scripting
/\ == \ /\ \ /\ \ \ \ alert/XSS/ ------------------------------------------------------------------------------------------ Demo : + http://jobsite.65m.com/basicsearchresult.php?title=alert/XSS/ ------------------------------------------------------------------------------------------- EOF...
Joomla Job SQL Injection
view source print? / ! Joomla Component comjob showMoreUse SQL injection vulnerability ! Author : Palyo34 ! Homepage: http://www.1923turk.biz ! Date : 12 08, 2009 / + Manas58 + Topunuzun a.q + aponun picleri + + + 7 KAHRAMAN fiEHâºDâºMâºZ⺠SAYGIYLA ANIYORUZ ALLAH RAHMET EYLESâºN...
cups: Several XSS flaws in forms processed by CUPS web interface
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...
DEBIAN-CVE-2009-2820
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...
HP-UX LPD Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP-UX LPD...
Guardian Jobs Site Hacked, Data Stolen
In what is being described as a “deliberate and sophisticated crime,” the Guardian newspaper in the U.K. says the careers section of its Web site was hacked, exposing sensitive data belonging to about half a million users. According to a note posted online by the Guardian: The police remain anxio...
How to Protect Your Resume From Identity Theft
“Job candidates are willing in this market to give any information they can that would help them get a job,” said Ellen B. Vance, an HR consultant and auditor who advises companies on how to safeguard applicant and employee information. The instinct is natural, but it can leave you vulnerable to...
lftp security update
CentOS Errata and Security Advisory CESA-2009:1278 An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file...
Unrestricted file upload
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...
CVE-2008-6931
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...
CVE-2008-6931
CVE-2008-6931 concerns an unrestricted file upload vulnerability in PHPStore Job Search (PHPCareers) . The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file under...
Miniweb 2.0 Job Board XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
openSUSE Security Update : cups (cups-232)
Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
openSUSE Security Update : apport (apport-816)
The apport crash watcher / handler suite contains a cron job that cleanes the world writeable /var/crash directory unsafely, allowing local attackers to remove random files on the system. CVE-2009-1295 This update fixes this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
pjl-ready-message NSE Script
Retrieves or sets the ready message on printers that support the Printer Job Language. This includes most PostScript printers that listen on port 9100. Without an argument, displays the current ready message. With the pjlreadymessage script argument, displays the old ready message and changes it...
Cross site scripting
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6847
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6847
CVE-2008-6847 describes a cross-site scripting (XSS) vulnerability in the Pre ASP Job Board, specifically in the login flow at Employee/emp_login.asp. The issue arises from the msg parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the NVD metrics, the base ...