Unfixed XSS vulnerability at www.magictraders.com

Security researcher Muplah, has submitted on 20/08/2009 a cross-site-scripting XSS vulnerability affecting www.magictraders.com, which at the time of submission ranked 203059 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.cheshirect.org

Security researcher Steven Abbagnaro, has submitted on 30/07/2009 a cross-site-scripting XSS vulnerability affecting www.cheshirect.org, which at the time of submission ranked 892873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. I...

SA-CONTRIB-2009-041 - Nodequeue - Access bypass

The Nodequeue module enables an administrator to arbitrarily put nodes in a group with an arbitrary order for any purpose, such as providing a listing of nodes or featuring a particular node. On the queue administration screen, users with permission to manipulate a queue are presented with an...

Design/Logic Flaw

Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and 1 read unpublished content from anonymous users when a view is already configured to display the content, and 2 read private content in generated queries...

CVE-2009-2077

Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and 1 read unpublished content from anonymous users when a view is already configured to display the content, and 2 read private content in generated queries...

Unfixed XSS vulnerability at snippets.dzone.com

Security researcher Uber0n, has submitted on 21/03/2009 a cross-site-scripting XSS vulnerability affecting snippets.dzone.com, which at the time of submission ranked 3030 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is current...

CVE-2009-0382

Unspecified vulnerability in Internationalization i18n Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors...

SA-2008-065 - Node Clone - Access bypass

The third-party Node Clone module enables users to make a copy of an existing item of content a node, and then edit that copy. The module contains a flaw that allows a user with the 'clone node' permission to potentially bypass normal viewing access restrictions, for example allowing the user to...

Unfixed XSS vulnerability at www.radio666.com

Security researcher Stacker, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.radio666.com, which at the time of submission ranked 2631352 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.ozalpyibo.com

Security researcher madking, has submitted on 08/08/2008 a cross-site-scripting XSS vulnerability affecting www.ozalpyibo.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2008. It is currently...

Unfixed XSS vulnerability at www.investors.com

Security researcher Venom23, has submitted on 25/04/2008 a cross-site-scripting XSS vulnerability affecting www.investors.com, which at the time of submission ranked 12000 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is...

phpnuke80final-sql.txt

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

phpnuke80-sql.txt

version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...

SetCMS 3.6.5 (setcms.org) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl SetCMS v3.6.5 setcms.org remote commands execution exploit by RST/GHC o4.o9.2oo6 coded by 1dt.w0lf THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE про багу: file: functions.php FUNCTION ip global $userid; ifgetenv'HTTPCLIENTIP' $userip =...

PHP-Nuke 8.0 Final - sid SQL Injection

PHP-Nuke 8.0 Final - sid SQL Injection ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

Unfixed XSS vulnerability at www.loading.es

Security researcher TreX, has submitted on 24/12/2007 a cross-site-scripting XSS vulnerability affecting www.loading.es, which at the time of submission ranked 1148940 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

Unfixed XSS vulnerability at www.thetasteofasia.com

Security researcher Uber0n, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.thetasteofasia.com, which at the time of submission ranked 1637679 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/11/2007. It is...

CVE-2007-5597

The hookcomments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by 1 Organic groups and 2 Subscriptions...

Authentication flaw

The hookcomments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by 1 Organic groups and 2 Subscriptions...

CVE-2007-5597

The hookcomments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by 1 Organic groups and 2 Subscriptions...