x10 MP3 Automatic Search Engine 1.6.5b - 'info.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

Discuz! Account the issuance of the plug-in injection 0day-vulnerability warning-the black bar safety net

Discuz! Account the issuance of the plug-in injection 0day Plugin name:2Fly giftnumberpayment system 漏洞 文件 :2flygift.php Version:latest version Exp:http://www. xxx. com/2flygift. php? pages=content&gameid=1 6 and 1=2 union select 1,2,3,4,concatusername,0x3a,password,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1...

CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

Design/Logic Flaw

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

CVE-2008-6960

The CVE-2008-6960 entry concerns X10media’s x10 Automatic Mp3 Search Engine Script (versions 1.5.5–1.6). According to the description, the vulnerability is in download.php, where an encoded url parameter allows remote attackers to read arbitrary files, demonstrated by retrieving database credenti...

Warn about assigning "Anyone" group in Global and Project permissions

Assigning anyone to global permissions such as a "Browse user" is a sure way to shoot yourself in the foot inadvertently. We make a vague mention of it in the documentation https://confluence.atlassian.com/display/JIRA/Managing+Global+Permissions quote if you wish to grant the permission to non...

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

Meta Search Engine Script (url) Local File Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion

source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...

CVE-2009-2233

The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...

Authentication flaw

The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...

CVE-2009-2233

The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...

AWScripts Gallery Search Engine Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

No description provided by source. + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php sebug.net...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

Exploit for unknown platform in category web applications ================================================================= AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability ================================================================= + AWScripts.com Gallery Search Engine 1.5...

AWScripts Gallery Search Engine 1.x - Insecure Cookie

AWScripts Gallery Search Engine 1.x - Insecure Cookie + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ----...

AWScripts Gallery Search Engine 1.x - Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php milw0rm.com 2009-06-22...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...