PersianBlog - Userslist.asp SQL Injection

PersianBlog - Userslist.asp SQL Injection source: https://www.securityfocus.com/bid/14575/info PersianBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

rsaXSS.txt

RSA XSS Vulnerabilities Author: Rodrigo Gutierrez Affected: RSA "Speaking of Security" Blog Status: Notified Hereby Vendor url: http://www.rsasecurity.com Background. RSA secures more than 15 million user identities, safeguards trillions of business transactions annually and manages the...

TOPo22.txt

TOPo 2.2 multiple variable & fields XSS and information disclosure vendor url:http://ej3soft.ej3.net/index.php?m=info&s=topo&t=info advisore: http://lostmon.blogspot.com/2005/05/topo-22-multiple-variable-fields-xss.html vendor notified: yes exploit available: yes. TOPo is a free TOP system writte...

Jax PHP Scripts 1.0/1.34/2.14/3.31 - 'jax_guestbook.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script...

XOOPS 2.0.11 && Earlier Multiple Vulnerabilities

GulfTech Security Research June 28th, 2005 Vendor : XOOPS URL : http://www.xoops.org/ Version : XOOPS 2.0.11 And Earlier Risk : Multiple Vulnerabilities Description: XOOPS is a very popular dynamic web content management system written in Object Oriented PHP. One of the features of XOOPS is it's...

Community Link Pro - 'login.cgi?File' Remote Command Execution

source: https://www.securityfocus.com/bid/14097/info Community Link Pro is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. Due to this, an attacker can prefix arbitrary commands with the '|' character...

DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access...

ATutor 1.4.3 - 'send_message.php?l' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code executed...

cPanel 9.1 - 'User' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13996/info It is reported that cPanel is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplied data vi...

[exploit] phpMyVisites 1.3 local file retrieval

================================================================== File: phpMyVisites 1.3 local file retrieval From: remote Date: 26/04/2005 Credits: Max Cerny maxatczernydotcz Vendor: http://www.phpmyvisites.net Affected version: 1.3, other not tested...

Pinnacle Cart - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13138/info Pinnacle Cart is affected by a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Comersus Cart 4.0/5.0 - 'Comersus_Search_Item.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13125/info Comersus Cart is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly validate user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Invision Power Board 1.x - ST SQL Injection

Invision Power Board 1.x - ST SQL Injection source: https://www.securityfocus.com/bid/13097/info Invision Power Board is reported prone to an SQL injection vulnerability. Due to improper filtering of user-supplied data, attackers may pass SQL statements to the underlying database through the 'st'...

simpgbSQL.txt

Hi, The PHP guestbook SimpGB 1, written by Boesch IT-Consulting 2 can be exploited to gain userdata. The quote variable isn't checked carefully in simpgb/include/gbnew.inc called by guestbook.php. I wrote a proof of concept which shows a md5 hash and the username, read from the database...

Aztek Forum 4.0 - 'myadmin.php' Database Dumper

/ Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50 Ubuntu PHP/4.3.8 X-Powered-By: PHP/4.3...

CubeCart < 2.0.5 Multiple Vulnerabilities

The version of CubeCart on the remote host is vulnerable to a local file include issue, along with related cross-site scripting and path disclosure issues, due to a failure to sanitize user-supplied data. Successful exploitation of this issue may allow an attacker to execute arbitrary code on the...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and aris...

GLSA-200501-45 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...

MercuryBoard 1.1.1 - SQL Injection

little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/ milw0rm.com 2005-02-12...

[PersianHacker.NET 200502-05] WWWoard passwd

Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final WWWBoard is a threaded World Wide Web discussion forum and message board, which allows users to post new messages, followup to existing ones and more. The current release in 2.0 ALPHA 2.1, which means there still are a...