CVE-2009-1787

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

CVE-2009-1787: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

PHP Dir Submit SQL Injection

-------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

PHP Dir Submit (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

PHP Dir Submit (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== PHP Dir Submit Auth Bypass SQL Injection Vulnerability ========================================================...

PHP Dir Submit - Authentication Bypass

PHP Dir Submit - Authentication Bypass -------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

PHP Dir Submit - Authentication Bypass

-------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

AJAX combined with URL forwarding vulnerability a cross-domain submit data-vulnerability warning-the black bar safety net

by emptiness prodigal heart Chrome browser, when using ajax, the url forwarding vulnerability with cross-domain submit data but can not read the returned data. IE6 with certain versions of Don't know what version at home and a cafe is successful, the user click“OK”after, but also can be a...

Design/Logic Flaw

Opera executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a w...

CVE-2009-1598

Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrate...

CVE-2009-1599

Summary: CVE-2009-1599 concerns a PDF-related JavaScript security bypass in Opera. The vulnerability arises when a javascript: URI is executed from the target attribute of a submit button inside a form contained in an inline PDF, potentially bypassing Adobe Acrobat JavaScript restrictions on acce...

CVE-2008-5977

SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action...

CVE-2008-4898: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action...

Cross site scripting

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

CVE-2008-2557

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

CVE-2008-2557

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

CVE-2008-2557

The CVE-2008-2557 entry affects CRE Loaded versions 6.2.13.1 and earlier, with a Cross-Site Scripting (XSS) vulnerability exploitable via the Links and Links Submit pages. The underlying issue is an injected web script or HTML due to improper input handling on these pages, enabling arbitrary scri...

CVE-2008-2557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

Unfixed XSS vulnerability at www.coasttocoastam.com

Security researcher Azat Harutyunyan, has submitted on 28/05/2008 a cross-site-scripting XSS vulnerability affecting www.coasttocoastam.com, which at the time of submission ranked 7598 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008...

CVE-2008-1550

Multiple cross-site scripting XSS vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the a parameter in a searchStr action and the 2 Submit parameter...