1284 matches found
SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login_form) Remote File Inclusion
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + PhpHostBot loginform Remote File Inclusion + + Download link : http://www.idevspot.com/PhpHostBot.php + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Bug Found By :S4M3K...
postrev-rfi.txt
Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...
Sql injection
SQL injection vulnerability in index.php aka the login form in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field ps parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-0339
SQL injection vulnerability in index.php aka the login form in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field ps parameter. NOTE: some of these details are obtained from third party information...
ppc engine Multiple file inclusion
============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: ppc engine Method: file inclusion Thanks To : akukasih,nyubi,irvian,BlueSpy and all hitamputih crew...
PPC Search Engine 1.61 - 'INC' Multiple Remote File Inclusions
============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- script demo: http://www.hyper-scripts.com/demo/ppc/ Risk : very danger Thanks To : all hitamputih crew special To :...
CVE-2006-7233
Cross-site scripting XSS vulnerability in the login form login.jsp of the admin console in Openfire formerly Wildfire 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2006-6780
SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit parameter...
CVE-2006-6784: Undefined Security Weakness
SQL injection vulnerability in Netbula Anyboard allows remote attackers to execute arbitrary SQL commands via the user name in the login form...
CVE-2006-6780: Undefined Security Weakness
SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit parameter...
CVE-2006-6780
SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit parameter...
CVE-2006-6022
Cross-site scripting XSS vulnerability in loginform.asp in BestWebApp Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2006-3613
Multiple cross-site scripting XSS vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software aka enterprise edition allow remote attackers to inject arbitrary web script or HTML via the 1 itemfor aka "Who is this item for?" and 2 special aka "Special...
CVE-2006-3613
Multiple cross-site scripting XSS vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software aka enterprise edition allow remote attackers to inject arbitrary web script or HTML via the 1 itemfor aka "Who is this item for?" and 2 special aka "Special...
ezWaiter v3.0 - XSS
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...
ezWaiter30.txt
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...
AlstraSoft Web Host Directory v1.2
AlstraSoft Web Host Directory v1.2 Homepage: http://www.alstrasoft.com/ It should be noted too that the demo for this script is on a different domain which also sells a WebHost Directory which looks to be the same product/company called HyperStop WebHost Directory 1.2. Both scripts seem to be the...
Novell Client login form enables reading and writing from and to the clipboard of the logged-in user
Suggested Risk Level: Low. Type of Risk: Information Leakage, Information Injection, Unauthorized Access. Affected Software: Novell Client for Windows, versions 4.9 and 4.8 On windows XP Pro and Windows 2000 Workstation. This versions are the only one tested, thus other version may be vulnerable ...
Information disclosure
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information...