verisign-xss.txt

VeriSign Kontiki Delivery Management System DMS Cross-Site Scripting Vulnerability CVE Number: CVE-2008-4393 Vulnerability Type / Importance: XSS / Medium Problem discovered: September 24th 2007 Vendor contacted: September 26th 2007 Advisory published: March 28th 2008 Abstract The Kontiki Deliver...

CVE-2008-4337

CVE-2008-4337 is an XSS vulnerability in Bitweaver 2.0.2. The provided documents describe multiple vectors: arbitrary script/HTML injection via URL parameters across numerous pages (articles/edit/list; blogs/list_blogs/rankings; calendar and events pages; fisheye galleries; liberty/list_content; ...

Unfixed XSS vulnerability at www.almanac.com

Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.almanac.com, which at the time of submission ranked 52857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...

CVE-2008-3022

Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remote attackers to execute arbitrary PHP code via a URL in 1 icerikyolu, 2 sayfaid, and 3 uzanti parameters...

RSS-aggregator SQL注入漏洞

BUGTRAQ ID: 30016 CNCAN ID：CNCAN-2008070102 RSS-aggregator是一款基于PHP的WEB应用程序。 RSS-aggregator不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 RSS-aggregator 1.0 目前没有详细解决方案提供： http://www.rss-aggregator.com/...

Unfixed XSS vulnerability at www.kaobanga.com

Security researcher F3nix, has submitted on 07/01/2008 a cross-site-scripting XSS vulnerability affecting www.kaobanga.com, which at the time of submission ranked 397031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currentl...

Unfixed XSS vulnerability at www.weberdavisutahhomes.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.weberdavisutahhomes.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It is...

Unfixed XSS vulnerability at www.sunnysouthfloridarealestate.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.sunnysouthfloridarealestate.com, which at the time of submission ranked 9514973 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.flybalaton.com

Security researcher xylitol, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.flybalaton.com, which at the time of submission ranked 2333856 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.jachtklubas.lt

Security researcher F3nix, has submitted on 06/01/2008 a cross-site-scripting XSS vulnerability affecting www.jachtklubas.lt, which at the time of submission ranked 3269275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Unfixed XSS vulnerability at biblioteca.carregal-digital.pt

Security researcher BackDoor, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting biblioteca.carregal-digital.pt, which at the time of submission ranked 5664707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.jesper.nu

Security researcher kylex, has submitted on 05/06/2008 a cross-site-scripting XSS vulnerability affecting www.jesper.nu, which at the time of submission ranked 14252 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2008. It is currently...

Unfixed XSS vulnerability at www.enlaces.cl

Security researcher sl4xUz, has submitted on 05/05/2008 a cross-site-scripting XSS vulnerability affecting www.enlaces.cl, which at the time of submission ranked 36076 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/05/2008. It is currently...

Unfixed XSS vulnerability at www.ekontaktas.lt

Security researcher F3nix, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.ekontaktas.lt, which at the time of submission ranked 38917 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currentl...

Mozilla Firefox < 2.0.0.12 Multiple Vulnerabilities

Binary data 4365.prm...

URL token stealing via stylesheet redirect — Mozilla

Security researcher Martin Straka reported that Gecko-based browsers update the .href property of stylesheet DOM nodes to reflect the final URI of the stylesheet after following any 302 redirects much as the document.location property is updated. This differs from other browsers and could...

Unfixed XSS vulnerability at antena1.ro

Security researcher Shocker -at- ShockingSoft.com, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting antena1.ro, which at the time of submission ranked 19888 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/200...

Unfixed XSS vulnerability at www.fawri.dz

Security researcher t0fx, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.fawri.dz, which at the time of submission ranked 200838 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is currently...

digitalhive-sql.txt

body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF; font-family:Verdana,Arial; font-size:10px; vertical-align:middle; border-left:1px solid 5d5d5d; border-right:1px solid 121212;...

Unfixed XSS vulnerability at www.haaretz.com

Security researcher TreX, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.haaretz.com, which at the time of submission ranked 8645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...