oscommerce-xss.txt

Oscommerce Multiple XSS in admin section. Vendor url:Http://www.oscommerce.com Advisore:http://lostmon.blogspot.com/2006/11/ oscommerce-multiple-xss-in-admin.html Vendor notify:YES Exploit available: YES osCommerce contains a flaw that allows a remote cross site scripting attack.This flaw exists...

EVA-Web <=2.1.2 vuln.

EVA-Web =2.1.2 vuln. Vuln. discovered by : r0t Date: 27 may 2006 vendor:http://spip-edu.edres74.net/ affected versions:2.1.2 and prior orginal advisory:http://pridels.blogspot.com/2006/05/eva-web-212-vuln.html Vuln. Description: EVA-Web contains a flaw that allows a remote cross site scripting...

Net Clubs Pro XSS vuln

Net Clubs Pro XSS vuln Vuln. discovered by : r0t Date: 20 april 2006 vendor:www.aasimedia.com/nc/nc.shtml affected versions:4.0 and prior orginal advisory: http://pridels.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html Vuln. Description: Net Clubs Pro contains a flaws that allows a remote cross...

Connect Daily Web Calendar Software Multiple XSS vuln.

Connect Daily Web Calendar Software Multiple XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.mhsoftware.com/connectdaily.htm affected versions:3.2.9 and prior orginal advisory:http://pridels.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html Vuln. description:...

Kayako SupportSuite multiple vuln.

Kayako SupportSuite multiple vuln. Vuln. discovered by : r0t Date: 30 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/kayako-supportsuite-multiple-vuln.html vendor:http://www.kayako.com/supportsuite.php affected version: v3.00.26 and prior Product Description: Kayako SupportSuite...

Libertas Enterprise CMS XSS vuln.

Libertas Enterprise CMS XSS vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/libertas-enterprise-cms-xss-vuln.html vendor:http://www.libertas-solutions.com/ affected version:3.0 and prior Product Description: Libertas Enterprise Content...

paFileDB Extreme Edition SQL inj

paFileDB Extreme Edition SQL inj Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html vendor:http://pafiledb.byethost15.com/ affected version:RC 5 and prior Product Description: The core of this script is based on...

Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks

Indonesia Security Development Team Advisory Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks ====================================================================================================== Advisory Name: Cart32 Input Validation Flaw in...