115 matches found
Directory Traversal
peiserver is vulnerable to directory traversal attacks. The attacks are possible by requesting a URL such as /..%2f..%2fetc/passwd to get sensitive information...
innofader.com XSS vulnerability
Open Bug Bounty ID: OBB-418498 Description| Value ---|--- Affected Website:| innofader.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
powerfarming.com.au XSS vulnerability
Vulnerable URL: http://www.powerfarming.com.au/login.asp?sellyourequipment=1"...
Power by NETDOIT Cross Site Scripting
/newsdetail.php?id=%27%22%28%29%26%251%3cScRiPt%20%3eprompt%28/xss/%29%3c%2fScRiPt%3e...
M-TECH P-Synch 6.2.5 nph-psa.exe css Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/7747/info A remote file include vulnerability has been reported for P-Synch. Due to insufficient sanitization of some user-supplied URI variables, it is possible for a remote attacker to include a malicious file in a URL...
Cybercriminals Peddling Android Malware Through Twitter
Researchers at Symantec have identified a spike in Twitter messages carrying links to malicious programs for Android mobile devices in recent weeks, according to a post on Symantec’s Security Response blog on Monday. The post, penned by Joji Hamada, describes a series of Russian and...
Whois.com Cross Site Scripting
Exploit Title: whois.com Cross Site Scripting Vulnerability Date: 12/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: - Email: [email protected] $ Vulnerable : http://domains.domain.com/hosting.php?type= $ Preview Sites:...
PHP-Fusion-AP-7.00.2-Rus (search.php) disclosure ways
Exploit for unknown platform in category web applications ===================================================== PHP-Fusion-AP-7.00.2-Rus search.php disclosure ways ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...
Juice For Restaurants SQL Injection
|| | | |In The Name 0F G0d | | | |----------------------------------------------------------------------------------------------| | | |Juice Remote SQL Injection Vulnerability | | | |----------------------------------------------------------------------------------------------| | | |Founder :...
StudIP1302.txt
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ Stud.IP Remote File Inclusion Stud.IP is a learning and an information management system for universities, educational facilities and enterprises. http://www.studip.de...
CVE-2005-0623
Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL...
Mozilla Firefox < 1.0.1 Multiple Vulnerabilities
Binary data 2652.prm...
CVE-2005-0335
Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
CVE-2004-2171
Cross-site scripting XSS vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page...
CVE-2004-1807
Cross-site scripting XSS vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2004-2113
Cross-site scripting XSS vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL...
CVE-2004-1229
Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via 1 http:// or 2 news:// URLs, a different vulnerability than CVE-2004-1410...
CVE-2004-1075
Cross-site scripting XSS vulnerability in standarderrormessage.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message...
Opera < 7.54 location Object Crafted URL Arbitrary Local File Access
The version of Opera on the remote host fails to block write access to the 'location' object. This could allow a user to create a specially crafted URL to overwrite methods within the 'location' object that would execute arbitrary code in a user's browser within the trust relationship between the...
