CVE-2011-4780

Multiple cross-site scripting XSS vulnerabilities in libraries/displayexport.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the 1 server, 2 database, and 3 table sections...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

Clipshare Pro 4.1 Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

E-Xoopport - Samsara 3.1 Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; $host = $ARGV0; $usr = $ARGV1; $pwd = $ARGV2; $anickde = $ARGV3; $anick = '0x'.EncHex$anickde; print "+ Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd" ; $ua = LWP::UserAgent-new; $ua-agent"Mozilla 5.0"; my $req = POST $host,...

Cross-site Request Forgery (CSRF) Vulnerabilities in Mystic

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Mystic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Mystic 1.1 The vulnerability exists due to insufficient validation of the request origin in...

CustomCMS - Persistent Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://customcms.net/ Price:55$ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger gree...

Debian DSA-1961-1 : bind9 - DNS cache poisoning

Michael Sinatra discovered that the DNS resolver component in BIND does not properly check DNS records contained in additional sections of DNS responses, leading to a cache poisoning vulnerability. This vulnerability is only present in resolvers which have been configured with DNSSEC trust anchor...

CVE-2009-4429

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

CVE-2009-4429

CVE-2009-4429 is an XSS vulnerability in Drupal's Sections module. Affected: Sections module for Drupal 5.x (before 5.x-1.3) and 6.x (before 6.x-1.3). Condition: remote authenticated users with "administer sections" privileges can inject arbitrary script/HTML via the Name field. No exploitation o...

CVE-2009-4429

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

Drupal Module Sections - Cross-Site Scripting

Drupal Module Sections - Cross-Site Scripting The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Drupal 6.14 with Sections 6.x-1.2 multiple XSS

Exploit for unknown platform in category web applications ============================================== Drupal 6.14 with Sections 6.x-1.2 multiple XSS ============================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at...

Drupal 6.14 With Sections 6.x-1.2 XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...

Drupal Module Sections - Cross-Site Scripting

The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...

Drupal Sections Module XSS Vulnerability

No description provided by source. The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides...

Drupal 6.14 with Sections 6.x-1.2 multiple XSS

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system...

Drupal Sections Module XSS

The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability: - - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third...

SA-CONTRIB-2009-112 - Sections - Cross Site Scripting

The Sections module allows the creation of sections within a site. Each section has an installed template, theme or style attached to it. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Users who can take...

Drupal Sections Module XSS Vulnerability

Exploit for unknown platform in category web applications ======================================== Drupal Sections Module XSS Vulnerability ======================================== The text of this announcment is also available at http://www.madirish.net/?article=440 Description of Vulnerability:...