Unfixed XSS vulnerability at www.turkeyhack.org

Security researcher St@rExT, has submitted on 01/08/2007 a cross-site-scripting XSS vulnerability affecting www.turkeyhack.org, which at the time of submission ranked 554755 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at www.rapsheet.com

Security researcher St@rExT, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.rapsheet.com, which at the time of submission ranked 2227649 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...

Unfixed XSS vulnerability at uploadcenter.satelitci.de

Security researcher St@rExT, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting uploadcenter.satelitci.de, which at the time of submission ranked 219678 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It ...

Unfixed XSS vulnerability at videosehri.com

Security researcher St@rExT, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting videosehri.com, which at the time of submission ranked 81338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is currently...

DoceboLMS Xss Vuln.

Bhhgroup.org & Trtekforum.com script name : MaviPortal tr Version : All script Download: http://www.docebo.org/doceboCms/index.php?mn=docs&op=download&pi=54&id=44 script sites : http://www.docebo.org Risk : High Found By : St@rExT Vulnerable file : arama.asp Xss Vuln:...

ldu-sql.txt

BhhGroup.Org & Trtekforum.com Found By : St@rExT script name : LandDownUnder LDU Version : All Dork : "Powered by LDU" Script sites : http://www.neocrome.net Vull name : LDU = 8.x journal.php SQL Injection Vulnerability Vulnerable file : Journal.inc.php...

maviportal-xss.txt

Bhhgroup.org & Trtekforum.com script name : MaviPortal tr Version : All script Download: http://www.docebo.org/doceboCms/index.php?mn=docs&op=download&pi=54&id=44 script sites : http://www.docebo.org Risk : High Found By : St@rExT Vulnerable file : arama.asp Xss Vuln:...

byd-sql.txt

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Burak Yılmaz Download Portal Script Download : http://maxiasp.com/scyorum.asp?scno=929 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX | Vulnerabl...

contra-SQL.txt

LiderHack.Org & BhhGroup.Org script name : Contra Haber Sistemi v1.0 Script Download : http://www.maxiasp.com/scriptler/HaberSistemi.rar Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0SS | UNiKnoX |...

asg-rfi.txt

LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...

toplist-xss.txt

LiderHack.Org script name : PhpBB Toplist 1.3.7 Dork : toplist.php?f=toplistnew Risk : High Found By : St@rExT Vulnerable file : Toplist.php New add sites addres: toplist.php?f=toplistnew Name: xss code & Information: xss code & Name: Your name & Name: alert"yourmessage" example sites :...

aspee.txt

LiderHack.Org Script name : Aspee Ziyaretçi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

vtforum-13.txt

LiderHack.Org script name : Vt-Forum Lite System V.1.3 Script Download : http://aspindir.com/indir.asp?id=585 Risk : High Found By : St@rExT Thanks : Dekolax , ShaFuck31 , ST@ReXT , Dekolax , SwatHack , Maverick , Candark , Torlaq , Woheras , Siruas Vulnerable file : vfinfo.asp XSS Bug:...

Solaris 9 (sparc) : 117201-09

X11 6.6.1: st patch. Date this patch was last updated by Sun : Feb/23/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid23531;...

Aix execve /bin/sh 88 bytes

No description provided by source. / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x90610438 , 0x3c602f73 , 0x60636801 ...

cahierSQL.txt

Cahier de textes Pierre Lemaitre - St Lô France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit http://localhost/PATH/lire.php?classeID=1&matiereID=SQL or http://localhost/PATH/lireafaire.php?classeID=SQL expemle of sql code to get admin user and password...

Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...

CVE-2006-3037

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...