203 matches found
CVE-2008-2766
The CVE-2008-2766 entry concerns Xigla Absolute Image Gallery XE, with a cross-site scripting (XSS) vulnerability affecting the admin/search.asp and gallery.asp endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents iden...
CVE-2008-2767: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to execute arbitrary SQL commands via the orderby parameter...
CVE-2008-2762: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...
CVE-2008-2766: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 admin/search.asp and 2 gallery.asp...
CVE-2008-2764: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...
CVE-2008-2757: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...
CVE-2008-2763: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...
CVE-2008-2768: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors "all fields"...
CVE-2008-2759: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...
Unfixed XSS vulnerability at www.rb-imconsult.de
Security researcher BlueMax, has submitted on 06/07/2008 a cross-site-scripting XSS vulnerability affecting www.rb-imconsult.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is currentl...
Unfixed XSS vulnerability at www.iladiba.com.co
Security researcher KrepTOr, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.iladiba.com.co, which at the time of submission ranked 9666521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It is...
Unfixed XSS vulnerability at www.koaspeer.com
Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.koaspeer.com, which at the time of submission ranked 1204932 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...
Unfixed XSS vulnerability at www.usfigureskating.org
Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.usfigureskating.org, which at the time of submission ranked 123829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It i...
Unfixed XSS vulnerability at www.lhlaser.cn
Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.lhlaser.cn, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/04/2008. It is currently unfixed...
ezyedit-xss.txt
. .. . ..\ | || | ||/ | / | / | | /\ | ||| /|/||| /| /| // / / / / / Author: cybermilitant Site: www.hacktime.org E-Mail: [email protected] Vulnerability: Cross Site Sctipting XXS Google Dork: "Powered by ezyEdit 2007"...
CVE-2008-0793: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 searchtext, 3 jobcategoryid, 4 contactcompany, and unspecified other parameters. NOTE: some of these details are obtained from third...
Unfixed XSS vulnerability at www.froer.nu
Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.froer.nu, which at the time of submission ranked 3527124 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...
nahc-sql.txt
Aria-Security Team http://Aria-Security.Net ------------------------------------------ Original Advisory @ http://aria-security.net/forum/showthread.php?p=1111 Try it online @ http://ads.netauctionhelp.com needed tables: tblMember.id tblMember.login tblMember.pswd Vulnarable Page: Login.asp Run...
