IDevSpot iSupport 1.8 - open_tickets.php?ticket_id Cross-Site Scripting

IDevSpot iSupport 1.8 - opentickets.php?ticketid Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow ...

IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting

IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an...

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow th...

Telekorn Signkorn Guestbook 1.x - adminindex.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminindex.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the...

Vikingboard 0.1b - report.php Cross-Site Scripting

Vikingboard 0.1b - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Vikingboard 0.1 - topic.php SQL Injection

Vikingboard 0.1 - topic.php SQL Injection source: https://www.securityfocus.com/bid/19919/info Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application, access or modify data, or...

UniversalBrowserRead privilege escalation — Mozilla

shutdown reports that scripts granted the UniversalBrowserRead privilege can leverage that into the equivalent of the far more powerful UniversalXPConnect since they are allowed to "read" into a privileged context. This allows the attacker the ability to run scripts with the full privilege of the...

[SECURITY] [DSA 1124-1] New fbi packages fix potential deletion of user data

-------------------------------------------------------------------------- Debian Security Advisory DSA 1124-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

DSA-1124 fbi - typo

Bulletin has no description...

Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)

Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...

QTOFileManager.txt

-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=%3Cscript%3Ealert%22Ellipsis%20Security%20Test%22%3C/script%3E&u=username&pathext=1...

blacksingles.txt

Blacksingles.com Homepage: http://www.blacksingles.com Affected files Profile input boxes Add a friend input box. list.html view.html reply.html compose.html ------------------------------------------------- XSS vuln with cookie disclosure via the Location box. User data isn't sanatized before...

ePrayver v.Alpha - XSS

Eprayer v.Alpha. Homepage: http://eprayer.sourceforge.net Affected files: input boxs of prayer request. User submitted data is not sanatized before being dynamically generated. Try putting the code below in as "Your name" SCRIPT SRC=http://youfucktard.com/xss.js/SCRIPT Screenshots:...

VBZoom 1.11 - forum.php SQL Injection

VBZoom 1.11 - forum.php SQL Injection source: https://www.securityfocus.com/bid/18472/info VBZooM is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow...

Forged Cookies online movies free to watch-vulnerability warning-the black bar safety net

Today, the network of movie sites a lot, but many are for a fee, rarely there will be a free“lunch”waiting for everyone to go enjoy. But now many movie sites registered ordinary members, if not renewed, the remaining money will be for $ 0, This is simply not be able to watch movies, even if you a...

Woltlab Burning Board 2.3.5 - &#039;links.php&#039; SQL Injection

!/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 newProto="tcp", PeerAddr="$webpage", PeerPort="80" || die "+ Can't connect to Server\n"; print "+ Exploiting....\n"; print $sock "GET $wbbdir HTTP/1.1\n"; print $sock "Accept: /\n"; print $sock "User-Agent: Hacker\n"; print $sock...

Albinator 2.0.8 - showpic.php?preloadSlideShow Cross-Site Scripting

Albinator 2.0.8 - showpic.php?preloadSlideShow Cross-Site Scripting source: https://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issue...

BluePay Manager v2.0 Script Insertion Vulnerability

BluePay Manager v2.0 Script Insertion Vulnerability Vuln. discovered by : r0t Date: 18 april 2006 vendor:bluepay.com affected versions:v2.0 and previous orginal advisory: http://pridels.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html Vuln. description: Input passed to the "Account...

SKForum 1.x - &#039;area.View.action?areaID&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/17389/info SKForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

MyBulletinBoard (MyBB) <= 1.04 (misc.php COMMA) SQL Injection (2)

Exploit for unknown platform in category web applications ================================================================= MyBulletinBoard MyBB : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! use IO::Socket; -- Start -- $host = "127.0.0.1";...