Joomla DJ Classifieds Shell Upload

Exploit Title:Upload Vulnerability in comdjclassifieds Version: Web Application vendor :http://dj-extensions.com/ Date: 2 apr,2010 Dork:inurl:comdjclassifieds Author:Sid3^effects Code : ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 8...

Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload

Joomla! Component comdjClassifieds 0.9.1 - Arbitrary File Upload Dork:inurl:comdjclassifieds ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...

JavaPont Local File Inclusion

JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable File index.php?module=search&q= XpL XpL ../../../../../../../../../../../../../../../etc/passwd%00 Demo...

JavaPont local file inclusion vulnerability

Exploit for unknown platform in category web applications =========================================== JavaPont local file inclusion vulnerability =========================================== JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable Fil...

jCore CMS Cross Site Scripting Vulnerability

No description provided by source. Found: loneferret Vendor: jCore Site: http://www.jcore.net/home Software link: http://www.jcore.net/downloads Search page is vulnerable to cross-site scripting. Exploit: http://server/modules/search?search=xss here http://server/modules/search?search=/axss here...

jCore - search Cross-Site Scripting

jCore - search Cross-Site Scripting source: https://www.securityfocus.com/bid/41748/info jCore is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

jCore CMS - Cross-Site Scripting

Found: loneferret Vendor: jCore Site: http://www.jcore.net/home Software link: http://www.jcore.net/downloads Search page is vulnerable to cross-site scripting. Exploit: http://server/modules/search?search=xss here http://server/modules/search?search=xss here Example: The result page will screw u...

CVE-2009-2438

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

CVE-2009-2438

CVE-2009-2438 describes a cross-site scripting (XSS) vulnerability in ClanSphere, affecting versions 2009.0 and 2009.0.2. The flaw allows remote injection of arbitrary script/HTML via the text parameter in a list action within the search module (index.php). The root cause is an input handling iss...

CVE-2009-2438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

Turnkey Ebook Store 1.1 Cross Site Scripting

Turnkey Ebook Store v1.1 - Cross site Scripting and Redirect Link: http://www.privatelabelresellrights-store.com/ebookstore/ - 31-03-2009 - Methodman - http://nemesis.te-home.net - Vulnerability was found on search module. example: - http://site.com/index.php?cmd=search&keywords="alert'XSS' -...

SecurityFocus.com Cross Site Scripting

Original Advisory http://www.dsecrg.com/pages/vul/show.php?id=63 Digital Security Research Group DSecRG Advisory DSECRG-09-007 Application: SecurityFocus.com Vendor URL: http://www.securityfocus.com Bugs: XSS Exploits: YES Reported: 21.01.2009 Vendor response: none Second report: 23.01.2009 Vendo...

Cross-Site Scripting vulnerability in Xaraya

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе Xaraya. XSS: Уязвимость в index.php в параметре d. http://site/?module=search&q=';alertdocument.cookie;// В последних версиях системы уязвимость уже исправлена. Дополнительная информация о данной уязвимост...

CVE-2008-2915

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2839

CVE-2008-2839 is a reported cross-site scripting (XSS) vulnerability in the Traindepot 0.1 search module. The issue arises when an attacker can inject arbitrary script or HTML through the query parameter to index.php, potentially affecting users who load the affected page. The provided data ident...

CVE-2008-2839: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

Pre Job Board - 'JobSearch.php' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Pre Job Board JobSearch.php Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reason ...