CVE-2006-6156

The CVE-2006-6156 entry describes a Cross-site scripting (XSS) vulnerability in the HIOX Star Rating System Script (HSRS) up to version 1.0, with the flaw located in auth/message.php and exploitable via the PHP_SELF query string. The underlying cause is unencoded user input that allows arbitrary ...

CVE-2006-6156

Cross-site scripting XSS vulnerability in auth/message.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF. NOTE: The provenance of this information is unknown; the details are obtained solely from...

HSRS 1.0 (addcode.php) Remote File Include Vulnerability

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php...

HSRS 1.0 - addcode.php Remote File Inclusion

HSRS 1.0 - addcode.php Remote File Inclusion --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script...

HSRS 1.0 - 'addcode.php' Remote File Inclusion

--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php Remote File Include Vulnerability Foun...

HSRS 1.0 (addcode.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================== HSRS 1.0 addcode.php Remote File Include Vulnerability ======================================================== --------------------------------------|| Viva Palestine...

geoauctionsSQL.txt

------=Part10286255599.1153211407989 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Be kind to publish it quickly, Regards, Angel Team NewAngels Advisory 12 GeoAuctions Enterprise & Others - Blind SQL Injection Vulnerability...

PostNuke Phoenix 0.72x - Rating System Denial of Service

PostNuke Phoenix 0.72x - Rating System Denial of Service source: https://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...

PostNuke Phoenix 0.72x - Rating System Denial of Service

source: https://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...