webSPELL 4.2.0c--XSS (BYPASS BBCODE) COOKIES STEALING VULNERABILITY--

webSPELL 4.2.0c XSS BYPASS BBCODE COOKIES STEALING VULNERABILITY ---------------- CMS INFORMATION: ---------------- --WEB: http://www.webspell.org/ affected too --DOWNLOAD: http://www.webspell.org/download.php?fileID=22 --DEMO: http://www.webspell.org/index.php?site=demo --CATEGORY: CMS / Portals...

webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | XSS BYPASS...

Sql injection

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

CVE-2008-0733 describes an SQL injection vulnerability in index.php of CS Team Counter Strike Portals, where the id parameter on the downloads page allows remote attackers to execute arbitrary SQL commands. The issue is caused by unsanitized input reaching a database query, enabling partial/ unau...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

csp-sql.txt

COUNTER STRİKE PORTALSKommentare zum Download script download=http://www.phpwelt.de/scripte/Sonstiges/?PHPSESSID=3cfc7efaa4b2a50e397b801526944fe6 AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ MAİL : [email protected] DORK 1 : allinurl: id mode=details "index.php?page=downloads...

Counter Strike Portals - download SQL Injection

Counter Strike Portals - download SQL Injection source: https://www.securityfocus.com/bid/27747/info Counter Strike Portals is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Counter Strike Portals - 'download' SQL Injection

source: https://www.securityfocus.com/bid/27747/info Counter Strike Portals is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

CVE-2006-3574

Multiple cross-site scripting XSS vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors aka HS06-014-01...

WAXTRAPP XSS vuln.

WAXTRAPP XSS vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/waxtrapp-xss-vuln.html vendor:http://www.waxtrapp.com affected version:3.0.x already tested on 3.0.1 and previous versions. Product Description: WAXTRAPP is a development platform...

CVE-2005-4323

Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated...

CVE-2005-4322

Multiple cross-site scripting XSS vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via...