Unfixed XSS vulnerability at homemarketplace.resultspage.com

Security researcher PaPPy, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting homemarketplace.resultspage.com, which at the time of submission ranked 15581 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. ...

Unfixed XSS vulnerability at wildseedmusic.com

Security researcher xylitol, has submitted on 06/09/2008 a cross-site-scripting XSS vulnerability affecting wildseedmusic.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/09/2008. It is currently...

Unfixed XSS vulnerability at soldat-tr.com

Security researcher hayaletkral, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting soldat-tr.com, which at the time of submission ranked 234960 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

XSS vulnerability in create/edit/copy page and blogpost actions

panelThe following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString panel Example of a maliciously crafted path:...

Unfixed XSS vulnerability at www.k2kapital.com

Security researcher Uber0n, has submitted on 04/04/2008 a cross-site-scripting XSS vulnerability affecting www.k2kapital.com, which at the time of submission ranked 62575 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is current...

CVE-2008-0060

Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:topiclist URL that injects HTML or JavaScript into a topic list page, as demonstrated using a help:runscript link...

Unfixed XSS vulnerability at www.yoyonappy.com

Security researcher SaMTHG, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.yoyonappy.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2008. It is currently...

Unfixed XSS vulnerability at www.halkinsesi.org

Security researcher st@rext, has submitted on 27/02/2008 a cross-site-scripting XSS vulnerability affecting www.halkinsesi.org, which at the time of submission ranked 1684542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.ketabforosh.com

Security researcher TreX, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.ketabforosh.com, which at the time of submission ranked 119025 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is...

Unfixed XSS vulnerability at www.vonango.com

Security researcher TreX, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.vonango.com, which at the time of submission ranked 256035 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/12/2007. It is currently...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 level parameter to a installmodule.php and b uninstallmodule.php in upload/xax/admin/modules/, c upload/xax/admin/patch/index.php, and d...

Design/Logic Flaw

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2...

CVE-2002-2369

Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL...

CVE-2003-1387

CVE-2003-1387 : A buffer overflow in Opera 6.05 and 6.06 (and possibly other versions) can be triggered by a URL containing a long username, allowing a remote attacker to potentially execute arbitrary code. The connected NVD entry confirms the vulnerability details but does not specify a patch ve...

CVE-2007-5573

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

Unfixed Script Insertion vulnerability at www.dominodude.com

Security researcher WhatALegend, has submitted on 10/09/2007 a Script Insertion vulnerability affecting www.dominodude.com, which at the time of submission ranked 4230401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is current...

Unfixed XSS vulnerability at gabrieldedavid.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting gabrieldedavid.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at composto.boun.edu.tr

Security researcher CiCoSz, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting composto.boun.edu.tr, which at the time of submission ranked 19923 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed Redirect vulnerability at geometri.us

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting geometri.us, which at the time of submission ranked 1795157 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If y...