CVE-2009-4868

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4868

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4868

CVE-2009-4868 describes a cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). The defect’s impact, as stated, is that an attacker can execute...

CVE-2009-4868: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the qid parameter to the answers script aka answers.php. NOTE: some of these details are obtained from third party information...

Winamp V5.572 0day suffer from local CRASH PoC

Exploit for windows platform in category dos / poc ============================================== Winamp V5.572 0day suffer from local CRASH PoC ============================================== !\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC...

Winamp 5.572 - Local Crash (PoC)

!\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME print qq WiNamP V5.572 0day SWF local CRASH PoC Credits : XP10.ME XP10HACKER Author : R3d-D3v!L Greetz : DRDAShER & JUP...

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump

Interspire SHOPPING CART 5.5.4 - Ultimate Edition backup dump ======================================================================================== | Title INTERSPIRE SHOPPING CART 5.5.4 - Ultimate Edition backup dump Vulnerability | Author indoushka | email [email protected] $ | Web Site...

Unfixed XSS vulnerability at fetch4.me

Security researcher LordTittiS, has submitted on 03/11/2010 a cross-site-scripting XSS vulnerability affecting fetch4.me, which at the time of submission ranked 478261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Maxs File Uploader - Arbitrary File Upload

Maxs File Uploader - Arbitrary File Upload in the name of allah Exploit Title: Max's File Uploader Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software Link: http://www.phpf1.com/product/file-upload-script.html Tested on: windows xp sp2 Dork : use your head exploit : add u r she...

Unfixed XSS vulnerability at nfo.dup3.me

Security researcher internet, has submitted on 01/08/2010 a cross-site-scripting XSS vulnerability affecting nfo.dup3.me, which at the time of submission ranked 632148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently...

Live TV Script SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Live TV script suffer from remote sql injection Vendor: livetvscript.com ? Software: Live TV script - ? author: R3d-D3v!L ? TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ? contact: N/A - ? Date: 3.Jan.2010 ? T!ME:...

Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion

======================================================================================== | Title : Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total aler...

ASP Invision Gallery Show SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/A ? ???????????????????????DEV!L'5 of...

gallery_show.asp - GID Blind SQL Injection

galleryshow.asp - GID Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/...

Unable to use HTTPS for login only

If you setup the urlrewrite.xml like so: noformat ^/s/.//download/images/^?. /images/$2 ^/s/.//^?. /$2 ^/login.action https https://localhost:8443/login.action ^/dologin.action https https://localhost:8443/dologin.action ^/. https /login.action. /dologin.action. /s/. http://localhost:8080/$...

V.H.S. Booking SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ? contact: N/A ?...

Charon Cart 3.0 - ContentID Blind SQL Injection

Charon Cart 3.0 - ContentID Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: reviewupdate.asp ContentID Blind SQL Injection Vulnerability Vendor: www.charon.co.uk Software: charoncartv3 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 4:46 a...

PRE HOTELS&RESORTS MANAGEMENT SYSTEM(Auth Bypass) Remote SQL Injection

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.preproject.com Software:PRE HOTELS & RESORTS MANAGEMENT SYSTEM author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am...

ASPGuest (edit.asp ID) Blind SQL Injection

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:edit.asp ID Blind SQL Injection Vulnerability Vendor: www.cjwsoft.com Software: ASPGuest free author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME ?...