493 matches found
Unfixed XSS vulnerability at battleofthevalley.com
Security researcher PaPPy, has submitted on 04/05/2008 a cross-site-scripting XSS vulnerability affecting battleofthevalley.com, which at the time of submission ranked 410971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/05/2008. It is...
Unfixed XSS vulnerability at www.vecchicompagnidiscuola.it
Security researcher fox91, has submitted on 15/02/2008 a cross-site-scripting XSS vulnerability affecting www.vecchicompagnidiscuola.it, which at the time of submission ranked 421890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. I...
CVE-2007-6374
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
CVE-2007-6374
CVE-2007-6374 concerns multiple XSS flaws in Bitweaver 2.0.0 and earlier, exploitable via PATH_INFO in four endpoints: /users/register.php, /search/index.php, /wiki/index.php (editcomments action), and /forums/index.php. The vulnerability allows remote attackers to inject arbitrary script or HTML...
CVE-2007-6374
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
Cross site scripting
Cross-site scripting XSS vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the 1 name and 2 website parameters to register.php...
CVE-2003-1466
CVE-2003-1466 affects Phorum 3.4–3.4.2. Unspecified vulnerability allows remote attackers to use Phorum as a proxy to other sites via (1) register.php or (2) login.php, enabling potential abuse of the application as a gateway to external hosts. The provided documents do not include concrete explo...
Cross site scripting
Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...
CVE-2007-5106
Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the userlogin parameter...
CVE-2007-5106
Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the userlogin parameter...
CVE-2007-5105
CVE-2007-5105 is a Cross-site Scripting (XSS) flaw in WordPress versions 2.0 and 2.0.1, exploitable via the user_email parameter in wp-register.php. The underlying issue is a script/HTML injection vulnerability that remote attackers can trigger, as documented across multiple sources (WordPress wp...
CVE-2007-5106
CVE-2007-5106 describes an XSS vulnerability in WordPress 2.0 related to wp-register.php where an attacker can inject arbitrary script/HTML via the user_login parameter. The issue is documented across multiple sources (NVD/Ubuntu/Debian/OSV and WPVulnDB) with the affected component being WordPres...
CVE-2007-4307
Storesprite 7 and earlier suffer multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the next parameter to addaddress.php, editshipdetails.php, register.php, or login.php in the secure/ path. The affected component is the web application Storesprite...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to search.php or the 2 typ parameter to register.php...
Unfixed XSS vulnerability at www.klansavaslari.net
Security researcher KaBuS, has submitted on 26/07/2007 a cross-site-scripting XSS vulnerability affecting www.klansavaslari.net, which at the time of submission ranked 6071 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
PBSite - PHP Bulletin Site | CMS ====> RFI
.-" "-. / | TiTaNiC | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / HaCkEr / @ script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114 authot:titanichacker [email protected] contact: hack-teach.com & mohandko.com...
MyEvent1.6 (template.php) Remote File Inclusion Vulnerability
.-" "-. / | TiTaNiC | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / HaCkEr / @ script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114 authot:titanichacker [email protected] contact: hack-teach.com & mohandko.com...
CVE-2007-2914
Multiple cross-site scripting XSS vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 awards.php, 2 login.php, 3 register.php, 4 weapons.php, and possibly other unspecified files...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 awards.php, 2 login.php, 3 register.php, 4 weapons.php, and possibly other unspecified files...
CVE-2007-2914
Multiple cross-site scripting XSS vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 awards.php, 2 login.php, 3 register.php, 4 weapons.php, and possibly other unspecified files...