Unfixed XSS vulnerability at www.trybalworld.org

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.trybalworld.org, which at the time of submission ranked 8462555 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

CVE-2008-1989

CVE-2008-1989 : PHP remote file inclusion in the 123 Flash Chat 6.8.0 module for e107 (123flashchat.php) allows remote code execution when register_globals is enabled. Exploitation occurs via a URL in the e107path parameter, enabling arbitrary PHP execution. The vulnerability is classified with a...

Unfixed XSS vulnerability at www.siteuptime.com

Security researcher PaPPy, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.siteuptime.com, which at the time of submission ranked 70818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is current...

Unfixed XSS vulnerability at www.eurekalert.org

Security researcher PaPPy, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.eurekalert.org, which at the time of submission ranked 15430 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It is current...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...

PHP security----using Register Globals-bug warning-the black bar safety net

Using Register Globals can PHP the most controversial change from PHP " 4.2.0 version of the beginning of the configuration file, registerglobals the default value from on to off. For this option the dependence is so prevalent that many people simply don't know it exists and thought PHP was so...

HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'ovalarmsrv.exe' Remote Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit Exploit date : 07.04.2008 Exploit writer : Heretic2 [email protected]...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - ovalarmsrv.exe Remote Overflow

HP OpenView Network Node Manager OV NNM 7.5.1 - ovalarmsrv.exe Remote Overflow / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflo...

Windows kernel vulnerability ms08025 analysis-vulnerability warning-the black bar safety net

Source:security focus Author: Polymorphours Email: [email protected] Homepage:http://www.whitecell.org Date: 2008-04-10 After internal discussion, it was decided to publish the analysis results. 4 on No. 8, microsoft again released a kernel patchKB941693, Microsoft the vulnerability is...

1024 CMS 1.4.2 - Local File Inclusion Blind SQL Injection

1024 CMS 1.4.2 - Local File Inclusion Blind SQL Injection Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin...

1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection

Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin Hash Retrieve Exploit Need: magicquotesgpc = Off Bug1: Vu...

phpTournois <= G4 Remote File Upload/Code Execution Exploit

?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not...

Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities

No description provided by source. Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities RFI/XSS/RCE by Florinu ------------ djflorinuatyahoodotcom 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals must to be: ON Vuln code: ?php / Name: Syntax Highlight / includeonce...

GROUP-E 1.6.41 (head_auth.php) Remote File Inclusion Vulnerability

No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rise...

GROUP-E 1.6.41 - head_auth.php Remote File Inclusion

GROUP-E 1.6.41 - headauth.php Remote File Inclusion ???????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The...

Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Wordpress Plugin Sniplets 1.1.2 RFI/XSS/RCE Multiple Vulnerabilities ====================================================================== Wordpress Plugin Sniplets...

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/...

WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...

wordpresssniplet-rfixssexec.txt

Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...