Lucene search
+L

6594 matches found

securityvulns
securityvulns
added 2010/08/26 12:00 a.m.63 views

Joomla! Component com_bc Cross Script Scripting (XSS) Vulnerability

===================================================================== Joomla! Component combc Cross Script Scripting XSS Vulnerability ===================================================================== 1. OVERVIEW The Joomla! Component combc was vulnerable to Cross Script Scripting XSS...

5.9AI score
SaveExploits0
OSV
OSV
added 2010/08/23 10:00 p.m.9 views

DEBIAN-CVE-2010-2543

Cross-site scripting XSS vulnerability in include/topgraphheader.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graphstart parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b...

4.3CVSS5.7AI score0.03874EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2010/07/30 12:00 a.m.11 views

MDVA-2009:224 : mandriva-kde4-config

This package adds new top bar for Mandriva Flash 2010 edition. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2010/07/26 12:00 a.m.38 views

CGI Generic Open Redirection

By providing specially crafted parameters to CGIs, Nessus was able to redirect to a third-party website. As redirections are commonly used, it is possible that users will be unaware that something abnormal is happening. This kind of attack can be used to steal confidential data, typically...

5.4AI score
SaveExploits0References2
zdt
zdt
added 2010/06/22 12:00 a.m.20 views

Top Sites SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== Top Sites SQL Injection Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/06/22 12:00 a.m.41 views

Top Sites Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Top Sites SQL Vulnerable Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...

5.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2010/04/21 4:45 p.m.12 views

Hundreds of Top Sites Open to Domain Hijacking

Less than 10% of the top 300 most highly trafficked sites are protected using a registry lock service. Why is that? MarkMonitor attempts to answer that in a Q&A. Read the full article. ZDNet...

1.9AI score
SaveExploits0References1
zdt
zdt
added 2010/04/09 12:00 a.m.60 views

WINDOWS FTP SERVER by DWG (Auth Bypass)

Exploit for windows platform in category remote exploits ======================================= WINDOWS FTP SERVER by DWG Auth Bypass ======================================= Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link:...

7.1AI score
SaveExploits0
NVD
NVD
added 2010/03/26 8:30 p.m.20 views

CVE-2009-4750

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

6.8CVSS7.5AI score0.02279EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2010/03/26 8:00 p.m.26 views

CVE-2009-4750

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

7.5AI score0.02279EPSS
SaveExploits2References4
CVE
CVE
added 2010/03/26 8:00 p.m.54 views

CVE-2009-4750

CVE-2009-4750 describes a PHP remote file inclusion in Top Paidmailer (home.php) where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter. The vulnerability arises from improper handling of user-controlled input in the page parameter, enabling RFI and like...

6.8CVSS7.8AI score0.02279EPSS
SaveExploits2References4Affected Software1
ThreatPost
ThreatPost
added 2010/03/19 1:55 p.m.18 views

Which ISPs Are Hosting the Bad Guys?

Security blogger Brian Krebs has compiled lists of the top 10 ISPs who are hosting the worst botnets, spam, phishing, and other malware from independent tracking organizations. These lists come from: Stop Badware, F.I.R.E., Phishtank, Zeustracker, Malware Domain List, Arbor Top ASN List, Emerging...

0.7AI score
SaveExploits0References2
Packet Storm
Packet Storm
added 2010/02/24 12:00 a.m.34 views

Top Auktion SQL Injection

----------------------------Information------------------------------------------------ +Name : Top Auktion SQL Injection news.php +Autor : Easy Laster +Date : 22.10.2010 +Script : Top Auktion +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktion/ +Price :...

0.4AI score
SaveExploits0
zdt
zdt
added 2010/02/23 12:00 a.m.19 views

Top Auktion (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Top Auktion news.php SQL Injection Vulnerability ================================================== ----------------------------Information------------------------------------------------...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/02/23 12:00 a.m.30 views

Top Auktion - news.php SQL Injection

Top Auktion - news.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Top Auktion SQL Injection news.php +Autor : Easy Laster +Date : 22.10.2010 +Script : Top Auktion +Price : 34,90€ +Language : PHP +Discovered by Easy Laster +Securit...

0.5AI score
SaveExploits0
NVD
NVD
added 2010/02/05 10:30 p.m.24 views

CVE-2003-1579

Sun ONE aka iPlanet Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing...

4.3CVSS6.6AI score0.00898EPSS
SaveExploits1References1
CVE
CVE
added 2010/02/05 10:13 p.m.79 views

CVE-2003-1579

CVE-2003-1579 affects Sun ONE (iPlanet) Web Server 6 on Windows. When DNS resolution is enabled for client IPs, the logging format does not clearly indicate if a dotted quad is unresolved, enabling remote attackers to spoof IPs via crafted DNS responses containing numerical top-level domains (ILL...

4.3CVSS6.9AI score0.00898EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2010/02/05 10:13 p.m.47 views

CVE-2003-1580

The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-lev...

4.3CVSS6.6AI score0.03709EPSS
SaveExploits1
Cvelist
Cvelist
added 2010/02/05 10:13 p.m.51 views

CVE-2003-1580

The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-lev...

6.6AI score0.03709EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2009/12/30 12:00 a.m.29 views

Best Top List Cross Site Scripting

======================================================================================== | Title : Best Top List Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

7.4AI score
SaveExploits0
Rows per page
Query Builder