CVE-2011-2152: Exposure of Sensitive Information to an Unauthorized Actor

The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for 1 Client/frmViewReports.aspx or 2 UserControls/Popups/frmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading a...

PT-2011-3640

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterStats version 6.0 Description The issue allows remote attackers to obtain sensitive information by exploiting a "cross-domain Referer leakage" issue. This is achieved through GET requests with query strings for specific API...

Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups

Exploit for windows platform in category dos / poc ========================================================= Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups ========================================================= Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit...

Mozilla Firefox 3.5.103.6.6 - WMP Memory Corruption Using Popups

Mozilla Firefox 3.5.103.6.6 - WMP Memory Corruption Using Popups Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on:...

Mozilla Firefox 3.5.10/3.6.6 - 'WMP' Memory Corruption Using Popups

Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 function go var oWMP = document.getElementById"WMP";...

CVE-2010-3425

Cross-site scripting XSS vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2010-3425: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Multiple Browsers - history.go() Denial of Service

Multiple Browsers - history.go Denial of Service DrIDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC function test window.onerror=new Function"history.go-1"; window.open'http://www.exploit-db.com'; test; test;...

Researcher Lifts Lid on Google's Spyware Connections

A prominent anti-spyware researcher is calling on Google to sever its ties with an advertising partner that covers popular sites with pop-up PPC advertisements promoting those same sites. According to Ben Edelman, an assistant professor at the Harvard Business School and a staunch anti-spyware...

e-topbiz Slide Popups 1 PHP - Authentication Bypass

e-topbiz Slide Popups 1 php Auth Bypass SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com MaiL : [email protected] script : http://e-topbiz.com/oprema/pages/slidepop1.php ExploiT admin ' or ' 1=1 login.... IQ-SecuritY FoRuM...

e-topbiz Slide Popups 1 php (Auth Bypass) SQL Injection Vulnerabilit

No description provided by source. e-topbiz Slide Popups 1 php Auth Bypass SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.comhttp://www.IQ-TY.com MaiL : [email protected] script : http://e-topbiz.com/oprema/pages/slidepop1.php ExploiT admin ' or ' 1=1 login.... IQ-SecuritY FoR...

e-topbiz Slide Popups 1 PHP - Authentication Bypass

e-topbiz Slide Popups 1 PHP - Authentication Bypass e-topbiz Slide Popups 1 php Auth Bypass SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com MaiL : [email protected] script : http://e-topbiz.com/oprema/pages/slidepop1.php ExploiT admin ' or ' 1=1 login.... IQ-SecuritY FoRuM...

e-topbiz Slide Popups 1 php (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== e-topbiz Slide Popups 1 php Auth Bypass SQL Injection Vulnerability ===================================================================== script :...

Ubuntu Update for firefox vulnerabilities USN-468-1

Ubuntu Update for Linux kernel vulnerabilities USN-468-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4681.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-468-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Sql injection

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-6264

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-6264

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-6264

CVE-2008-6264 : Affected product is E-topbiz Slide Popups 1.0; vulnerability in the admin.php script (password parameter) enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. Root cause appears to be insufficient input validation/sanitization in the affected code pa...

CVE-2008-6264: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

slidepopups-sql.txt

11/07/2008 - You can login as admin with any password, removed /str0ke -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Slide Popups v1.0 Auth Bypass SQL Injection Vulnerabilities...