CVE-2015-6827

Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...

CVE-2015-6827: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...

PT-2015-7379

Name of the Vulnerable Software and Affected Versions Auto-Exchanger version 5.1.0 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that change passwords via a request to "signup.php". Recommendations For Auto-Exchanger version 5.1....

ClipBucket CMS Xss Vulnerability

Xss Vulnerability In ClipBucket CMS @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @...

PT-2014-6282

Name of the Vulnerable Software and Affected Versions ol-commerce version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the a country parameter in a process action to "affiliate signup.php" or the entry country id parameter in...

PT-2014-6281

Name of the Vulnerable Software and Affected Versions ol-commerce version 2.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including the a country parameter in the "affiliate signup.php" file...

OrbitHYIP 2.0 signup.php referral Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17766/info OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

CVE-2014-4187

CVE-2014-4187 affects ClipBucket: a cross-site scripting (XSS) vulnerability in signup.php, exploitable via the Username field. The underlying issue is improper input handling in the user signup flow, allowing injected scripts/HTML to be executed in the context of affected sessions. The OpenVAS e...

PT-2014-5721

Name of the Vulnerable Software and Affected Versions ClipBucket affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. It affects the signup.php file, allowing remote attackers to inject arbitrary web script or HTML via the Username field...

CVE-2014-4187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

ClipBucket CMS Cross Site Scripting

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...

CVE-2013-4951: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...

PT-2013-5299

Name of the Vulnerable Software and Affected Versions Mintboard version 0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the name or pass parameter...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

CVE-2011-5190: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

PHPDug 2.0.0 Cross Site Scripting

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

CVE-2008-2428: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...

Unfixed XSS vulnerability at www.new.fm

Security researcher kInGoFcHaOs, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.new.fm, which at the time of submission ranked 93070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

Unfixed XSS vulnerability at www.rapidcounter.com

Security researcher st@rext, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.rapidcounter.com, which at the time of submission ranked 247323 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...