PT-2011-3727

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite versions 9.3.0.3 through 9.3.1.1 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to the Search function in the Agile Core Technolog...

Qianbo Enterprise Web Site Management System Cross Site Scripting

cross site scripting XSS Vulnerability + Portal Name : qianbo + software : http://www.qianbo.com.cn + Author : d3c0der + Contact : [email protected] + Google dork : Web Site Technology Framework$B!'BQianbo Enterprise Web Site Management System Copyright...

Unfixed XSS vulnerability at www.gamerevolution.com

Security researcher Moonzorg, has submitted on 19/02/2011 a cross-site-scripting XSS vulnerability affecting www.gamerevolution.com, which at the time of submission ranked 15855 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Auto Database System 1.0 Infusion Addon - SQL Injection

Auto Database System 1.0 Infusion Addon - SQL Injection Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion,...

PHP-Fusion Auto Database System 1.0 Infusion SQL Injection

Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Tested on: Firefox 3.0.15, , IE 8, mySQL...

CmsEasp 2.0.0 XSS vulnerability

易通企业网站系统也称易通企业网站程序，是易通公司开发中国首套免费提供企业网站模板的营销型企业网站管理系统，系统前台生成html、完全符合SEO、同时有在线客服、潜在客户跟踪、便捷企业网站模板制作、搜索引擎推广等功能的企业网站系统。 CmsEasy 2.0.0 null http://server/index.php?act=search&case=%3Cscript%3Ealert%28/xss/%29%3C/script%3E...

Cisco Wireless Control System XSS

Product Name: Cisco Wireless Control System Vendor: http://www.cisco.com Date: 4 August, 2010 Author: [email protected] [email protected] Original URL: http://www.tomneaves.com/CiscoWirelessControlSystemXSS.txt Discovered: 8 July, 2010 Disclosed: 4 August, 2010 I. DESCRIPTION The Cisco Wireless...

Thousand Bo enterprise website management system v2010 Build 0 7 1 6 vulnerability analysis-vulnerability warning-the black bar safety net

Release time: 2010-07-16 Affected version: Thousand Bo enterprise website management system v2010 Build 0 7 1 6 Vulnerability Description: The search type injection vulnerability Default background address: http://127.1/system/AdminLogin.Asp Publishing author: m4r10 reproduced please indicate the...

Unfixed XSS vulnerability at www.afmm.fr

Security researcher Xylitol, has submitted on 07/01/2010 a cross-site-scripting XSS vulnerability affecting www.afmm.fr, which at the time of submission ranked 300643 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...

Scribd.com Cross Site Scripting

SecWorm.net - Advisory http://SecWorm.net/ Steam XSS Vulnerability ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site Scripting...

Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user's browser. The following specific issues were identified: It is...

Advanced Image Hosting v2.2 XSS

No description provided by source. Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

Unfixed XSS vulnerability at www.safc.com

Security researcher cueballr, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.safc.com, which at the time of submission ranked 112361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Unfixed XSS vulnerability at www.mailer.bankaustria.at

Security researcher Viper.aT, has submitted on 12/01/2009 a cross-site-scripting XSS vulnerability affecting www.mailer.bankaustria.at, which at the time of submission ranked 6028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It i...

AJauctionPro Oopd 3.0 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + AJauctionPro Oopd V 3.0 Search Remote XSS Vulnerability + Software : AJauctionPro Oopd V 3.0 + Author : 599eme Man + Contact : [email protected] + Thanks :...

CVE-2009-2424

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Unfixed XSS vulnerability at www.wintotal.de

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.wintotal.de, which at the time of submission ranked 50674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is current...

Unfixed XSS vulnerability at tel.dict.cn

Security researcher Emrullah Akdemir, has submitted on 06/09/2009 a cross-site-scripting XSS vulnerability affecting tel.dict.cn, which at the time of submission ranked 1686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

getaphpsite e-store SQL Injection

getaphpsite e-store where Remote Sql inj script: http://www.getaphpsite.com/6.html ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMD...

Unfixed XSS vulnerability at www.graphfr.com

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting www.graphfr.com, which at the time of submission ranked 100983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...