CVE-2008-7010

Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to admin/register.php...

CVE-2008-6924

CVE-2008-6924 affects eSyndiCat Directory 2.2, with XSS in register.php allowing remote injection of scripts via six parameters (username, email, password, password2, security_code, register). The initial data lists a MEDIUM base score (CVSS v2: 4.3) and mentions no exploitation details; no remed...

Opial 1.0 File Upload / XSS / SQL Injection

::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL InjectionXSSalertdocument.cookie; Demo: http://www.opial.com/demo/register.ph...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

Sql injection

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2009-1228

CVE-2009-1228 is a documented cross-site scripting (XSS) vulnerability in the Arcadwy Arcade Script CMS, specifically in the register.php script where the username field (user_name parameter) can be injected with arbitrary web script or HTML by remote attackers. The NVD entry lists a CVSSv2 base ...

BlogMan 0.45 Multiple Vulnerabilities

Salvatore "drosophila" Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

gamersfusion-xss.txt

--------------------------------------------------------- Portal Name: Gamers Fusion 2.5 Vendor : http://sourceforge.net/projects/gamers-fusion Vulnerable File : register.php Dork: Vallheru Team based on Gamers-Fusion 2.5 Author : PouyaServer , [email protected] Vulnerability : XSS Cross sit...

Unfixed XSS vulnerability at www.metavantecards.com

Security researcher PaPPy, has submitted on 10/05/2008 a cross-site-scripting XSS vulnerability affecting www.metavantecards.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is current...

Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access

source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users. Vikingboard 0.2 Beta is vulnerable; other versions may also be affected. The followin...

SkaLinks 1.5 - register.php Arbitrary Add Editor

SkaLinks 1.5 - register.php Arbitrary Add Editor || || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add...

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

|| || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add admin EXPLOITS:...

Unfixed XSS vulnerability at www.theshiznit.co.uk

Security researcher PaPPy, has submitted on 09/11/2008 a cross-site-scripting XSS vulnerability affecting www.theshiznit.co.uk, which at the time of submission ranked 254247 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...

Unfixed XSS vulnerability at www.ultimatexchange.net

Security researcher PaPPy, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatexchange.net, which at the time of submission ranked 7394931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.hitmanslife.com

Security researcher PaPPy, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.hitmanslife.com, which at the time of submission ranked 125464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...

Owl Intranet Engine register.php跨站脚本执行漏洞

BUGTRAQ ID: 30410 CVECAN ID: CVE-2008-3100 Owl Intranet Engine是一种用于多用户维护知识库的基于Web软件。 Owl Intranet Engine没有正确地验证提交给register.php文件输入参数，允许远程攻击者通过提交恶意请求执行跨站脚本攻击。 Owl Intranet Engine = 0.95 Owl --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://owl.cvs.sourceforge.net/checkout/owl/owl-0.90/lib/owl.lib.php...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...