218 matches found
WinAmp 5.63 Buffer Overflow
Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: WinAmp Vendor URL: www.winamp.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2013-06-05 Date published: 2013-07-01 CVSSv2 Score: Bug 1: 7,5 AV:N/AC:L/Au:N/C:P/I:P/A:P Bug 2: 3,7...
XSS found on ShopEx
简要描述： There is a XSS found on zhidao.shopex.cn 详细说明： Severity: XSS Confidence: Confident Host: http://zhidao.shopex.cn/ Path: / Issue detail: If you enter the following XSS vector for the search field: " http://zhidao.shopex.cn/search?lm=2&word=" 漏洞证明： Using the above link, you will see a XSS lik...
CVE-2011-5110
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to 1 authorslist.php, 2 blogslist.php, 3 categorylist.php, 4 commentslist.php, 5 policylist.php, 6 ratelist.php, 7...
idev-BusinessDirectory 3.0 Cross Site Scripting
Title : idev-BusinessDirectory 3.0 Vulnerability Author : Red Security TEAM Date : 25/02/2012 Demo : http://www.idevspot.com/demos/idev-businessdirectory/ Dork : "Business Directory Software :: idev-BusinessDirectory 3.0" Tested On : CentOS Contact : Info at RedSecurity . COM Home :...
inCommand Technologies, Inc. Cross-site Scripting Vulnerability
------------In The Name Of God------------ inCommand Technologies, Inc. Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Website Design by inCommand Technologies, Inc." xss EXPLOIT:...
inCommand Technologies Cross Site Scripting
------------In The Name Of God------------ inCommand Technologies, Inc. Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Website Design by inCommand Technologies, Inc." xss EXPLOIT: alert/0/...
Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities
Exploit for php platform in category web applications Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities Advisory ID: SSCHADV2011-031 Author: Stefan Schurtz Affected Software: Successfully tested on Yet Another CMS 1.0 Vendor URL: http://yetanothercms.codeplex.com/ Vendor Status:...
Classifieddemo Cross Site Scripting
%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: Classifieddemo site XSS vulnerability Vendor: www.classifieddemo.com Date: 4th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D Google Dork: Copyright © 2011...
AV Arcade Search Field XSS/HTML Injection Vulnerability
Exploit for php platform in category web applications ======================================================= AV Arcade Search Field XSS/HTML Injection Vulnerability ======================================================= Exploit Title: AV Arcade Search Field /includes/misc/search.php XSS/HTML...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...
CVE-2010-1703
Multiple cross-site scripting XSS vulnerabilities in indexsearch.php in 2daybiz Polls aka Advanced Poll Script allow remote attackers to inject arbitrary web script or HTML via the 1 category parameter or 2 search field...
Advanced Poll Script SQL Injection / Cross Site Scripting
Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...
2daybiz Advanced Poll Script XSS and Authentication Bypass
Exploit for php platform in category web applications ========================================================== 2daybiz Advanced Poll Script XSS and Authentication Bypass ========================================================== Description : Advanced Poll is a polling system with powerful...
Cross site scripting
Cross-site scripting XSS vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp601500801 allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2010-0704
Cross-site scripting XSS vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp601500801 allows remote attackers to inject arbitrary web script or HTML via the search field...
Cross site scripting
Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...
CVE-2007-6002
Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...
CVE-2007-6002
CVE-2007-6002 describes a cross-site scripting (XSS) vulnerability in Fenriru Sleipnir (≤ 2.5.17 R2) and Grani (≤ 3.0). The flaw allows remote attackers to inject arbitrary web script or HTML via the Search field when performing a search for additions to the Favorites section. The connected docum...
CVE-2007-6002
Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...