phpicalendar-xss.txt

PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...

GNU Wget FTP_Syst函数远程拒绝服务漏洞

GNU Wget是一款流行的多协议文件获取应用程序。 GNU Wget FTPSyst函数存在问题，远程攻击者可利用此漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 GNU wget 1.10.2 GNU wget 1.10.1 GNU wget 1.10 GNU wget 1.9.1 + MandrakeSoft Corporate Server 3.0 x8664 + MandrakeSoft Corporate Server 3.0 + MandrakeSoft Linux Mandrake 10.2 x8664 + MandrakeSoft Linux Mandra...

Netscape/K-Meleon/Flock JavaScript navigator Vulnerability

Description: The newest versions of Netscape, K-Meleon and Flock browsers are affected to JavaScript navigator vulnerability described in http://browserfun.blogspot.com/2006/07/mobb-28-mozilla-navigator-object.html and Mozilla Foundation Security Advisory 2006-45. When method used in a web page...

Opera 9 - long href Remote Denial of Service

a...

ArmySystemv2.1.txt

Invision Power Board Army System Mod = 2.1 SQL Injection Exploit VULNERABLE PRODUCT ----------------------------------- Invision Power Board Army System Mod Version: 2.1 and priors. Url: http://supersmashbrothers.2ya.com Vulnerability: Remote SQL Injection...

CheesyBlog-1.0.txt

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

eggblog-sql.txt

New eVuln Advisory: eggblog Multiple SQL Injection & XSS Vulnerabilities http://evuln.com/vulns/39/summary/bt/ --------------------Summary---------------- Software: eggblog Sowtware's Web Site: http://www.epicdesigns.co.uk/projects/eggblog Versions: 2.0 Critical Level: Moderate Type: Multiple...

EV0028.txt

New eVuln Advisory: Wordcircle Multiple SQL Injection & XSS Vulnerabilities --------------------Summary---------------- Software: Wordcircle Sowtware's Web Site: http://www.wordcircle.org/ Versions: 2.17 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched...

Tolva PHP website system Remote File Include

Script: Tolva PHP website system Version: 0.1.0 Language: PHP Official Website: http://sourceforge.net/projects/twebs Problem: Remote File Include Discovered by: beford Description: ============ A complete collection of php scripts that work tightly together to create a highly customizable, dynam...

athena.txt

Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...

qnx-inputtrap.txt

rfdslabs security advisory Title: QNX inputtrap arbitrary file read vulnerability RLSA01-2005 Versions: QNX RTOS 6.3, 6.1.0 possibly others Vendor: http://www.qnx.com Date: Feb 22 2005 Author: Julio Cesar Fort 1. Introduction inputtrap is a utility designed to detect and start input manager in QN...

ZipTorrent1.3.7.3.txt

/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...

comersusXSSsql.txt

Spread The Word comersus based bookstore multiple script and variables XSS and SQL Injections vulnerabilities. vendor url:http://www.stwm.com/opportunity.asp advisore url:http://lostmon.blogspot.com/2005/05/ spread-word-multiple-xss-and-sql.html vendor notified:yes exploit available: yes Spread T...

dvbbsXSS.txt

DVBBS Multiple variable Cross site scripting vendor url:http://down.dvbbs.net/ SoftView/SoftView2455.html Advisory:http://lostmon.blogspot.com/2005/08/ dvbbs-multiple-variable-cross-site.html vendor notify:yes exploit available:yes OSVDB ID:18512 DVBBS contains a flaw that allows a remote cross...

cleverNotSo.txt

Clever copy Path disclosure and multiple XSS vendor url:http://clevercopy.bestdirectbuy.com advisory:http://lostmon.blogspot.com/2005/07/ clever-copy-path-disclosure-and-xss.html vendor notify: yes exploit available:yes Clever Copy is a free, fully scalable web site portal and news posting...

Echo Security Advisory 2005.18

--------------------------------------------------------------------------- ECHOADV18$2005 Multiple SQL INJECTION in Ublog Reload 1.0.5 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 20th 2005 Location: Indonesia, Jakarta Web:...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

Skull-Splitter Guestbook Multiple Field XSS

The remote version of this software is vulnerable to cross-site scripting attacks. Inserting special characters into the subject or message content can cause arbitrary script code execution for third-party users, thus resulting in a loss of integrity of their system. %NASLMINLEVEL 70300 This scri...

[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)

SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...

XSS Vulnerability in Siteman v1.1.9

New XSS Vulnerability in Siteman v1.1.9, Discovered by PersianHacker.NET Security Team by Pi3cH pi3ch yahoo com http://www.PersianHacker.NET Siteman is a Content Management System CMS that is so easy to install and use, that a person who has no knowledge about creating homepages can get a...