Unfixed XSS vulnerability at susning.nu

Security researcher Uber0n, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting susning.nu, which at the time of submission ranked 80140 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently...

Unfixed XSS vulnerability at www.weppos.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting www.weppos.com, which at the time of submission ranked 473902 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It...

Unfixed Script Insertion vulnerability at www.billbuchan.com

Security researcher WhatALegend, has submitted on 05/09/2007 a Script Insertion vulnerability affecting www.billbuchan.com, which at the time of submission ranked 3593126 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is current...

Unfixed XSS vulnerability at www.modahaber.com

Security researcher St@rExT, has submitted on 05/08/2007 a cross-site-scripting XSS vulnerability affecting www.modahaber.com, which at the time of submission ranked 62760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at www.tod-tog.com

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.tod-tog.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

Unfixed XSS vulnerability at www.justreadflorida.com

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.justreadflorida.com, which at the time of submission ranked 1253461 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007...

Unfixed XSS vulnerability at www.saadetpartisi.org.tr

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.saadetpartisi.org.tr, which at the time of submission ranked 122703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007...

Unfixed XSS vulnerability at www.the-joke-shop.com

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.the-joke-shop.com, which at the time of submission ranked 966730 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. I...

Unfixed XSS vulnerability at www.bollydvd.net

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.bollydvd.net, which at the time of submission ranked 1017639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

Unfixed XSS vulnerability at www.flcops.com

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.flcops.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. It is current...

Unfixed XSS vulnerability at www.autoresurs.sk

Security researcher MaXWeL, has submitted on 05/06/2007 a cross-site-scripting XSS vulnerability affecting www.autoresurs.sk, which at the time of submission ranked 3499520 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2007. It is...

Fixed XSS vulnerability at www.yapi.com.tr

Security researcher eX0dus, has submitted on 05/06/2007 a cross-site-scripting XSS vulnerability affecting www.yapi.com.tr, which at the time of submission ranked 148752 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2007. It is currentl...

Unfixed XSS vulnerability at www.tonbridge-school.co.uk

Security researcher MaXWeL, has submitted on 05/06/2007 a cross-site-scripting XSS vulnerability affecting www.tonbridge-school.co.uk, which at the time of submission ranked 1718410 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2007. It...

Unfixed XSS vulnerability at www.unlimitedgamedownloads.com

Security researcher By Encore, has submitted on 05/04/2007 a cross-site-scripting XSS vulnerability affecting www.unlimitedgamedownloads.com, which at the time of submission ranked 48153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/04/200...

Unfixed XSS vulnerability at www.hosthost.biz

Security researcher KaBuS, has submitted on 05/03/2007 a cross-site-scripting XSS vulnerability affecting www.hosthost.biz, which at the time of submission ranked 910976 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is currentl...

Unfixed XSS vulnerability at www.cs.utsa.edu

Security researcher KaBuS, has submitted on 05/03/2007 a cross-site-scripting XSS vulnerability affecting www.cs.utsa.edu, which at the time of submission ranked 51911 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is currently...

DEBIAN-CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

Design/Logic Flaw

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

CVE-2007-2348 affects lftp versions prior to 3.5.9, where the command prefix mirror --script does not properly quote shell metacharacters. This can allow a remote attacker controlling a malicious FTP server to run arbitrary commands via a crafted script. Several connected advisories note that upd...

Unfixed XSS vulnerability at www.vor.ru

Security researcher GeFORC3, has submitted on 27/04/2007 a cross-site-scripting XSS vulnerability affecting www.vor.ru, which at the time of submission ranked 199927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2007. It is currently...