1679 matches found
CVE-2008-4179
Multiple cross-site scripting XSS vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to smileys.php and the 2 q parameter to search.php...
Pre Real Estate Listings (search.php c) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Pre Real Estate Listings search.php c SQL Injection Vulnerability =================================================================== Pre Real Estate Listings search.php c...
Pre Real Estate Listings - search.php SQL Injection
Pre Real Estate Listings - search.php SQL Injection Pre Real Estate Listings search.php c Remote SQL Injection Vulnerability url: http://preproject.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...
Sql injection
Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...
CVE-2008-3861
CVE-2008-3861 affects phpMyRealty 1.0.7 and 1.0.9 (and earlier). The vulnerability is multiple SQL injection flaws caused by insufficient input sanitization in user-supplied data, enabling remote attackers to inject SQL via two parameters: id in pages.php and price_max in search.php. OpenVAS entr...
CVE-2008-3788
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 qtitle, 2 qid, and 3 qyear parameters to a search.php, and the 4 email and 5 password parameters to b login.php...
gallery-xss.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE Author: r45c4l...
Unfixed XSS vulnerability at www.cinezik.org
Security researcher PHPLizardo, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.cinezik.org, which at the time of submission ranked 233663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is...
rmsoftminishop-xss.txt
RMSOFT MiniShop module multiple variable XSS Vendor url:http://redmexico.com.mx Advisore:http://lostmon.blogspot.com/2008/08 /rmsoft-minishop-module-multiple.html Vendor notify:no exploit available:yes RMSOFT MiniShop is a E-commerce php/Mysql script module for multiple CMS Systems like...
Unfixed XSS vulnerability at mazuke.com
Security researcher SaMTHG, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting mazuke.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently unfixed...
CVE-2008-3565
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
MyBB search.php文件跨站脚本执行漏洞
BUGTRAQ ID: 30401 CVECAN ID: CVE-2008-3334 MyBB是一款流行的Web论坛程序。 MyBB的search.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 MyBB 1.2.x MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.net/download/latest...
Cross site scripting
Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...
CVE-2008-3334
Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...
CVE-2008-3334
Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...
CVE-2008-3334
Summary (CVE-2008-3334) : A cross‑site scripting (XSS) vulnerability exists in MyBB 1.2.x prior to 1.2.14 . The issue arises from insufficient input validation in certain parameters handled by the search path (likely including search.php), allowing remote attackers to inject arbitrary script/HTML...
Unfixed XSS vulnerability at www.rue-des-puzzles.com
Security researcher Sheiry, has submitted on 26/07/2008 a cross-site-scripting XSS vulnerability affecting www.rue-des-puzzles.com, which at the time of submission ranked 266850 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is...
Unfixed XSS vulnerability at www.cmclb.com
Security researcher LeBaNeSe-XsSeR, has submitted on 17/07/2008 a cross-site-scripting XSS vulnerability affecting www.cmclb.com, which at the time of submission ranked 4922562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/07/2008. It is...