WordPress Core 1.2.1/1.2.2 - 'link-manager.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

phpMyAdmin < 2.6.1-pl1 RCE

Binary data 2452.prm...

CVE-2004-1171

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are 1 manually entered by the user or 2 created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

vBulletin - LAST.php SQL Injection

vBulletin - LAST.php SQL Injection Example: http://www.example.com/last.php?fsel=,user.password%20as%20title,user.%20%20%20%20username%20as%20lastposter%20FROM%20user,thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT%201 milw0rm.com 2004-11-15...

vBulletin LAST.PHP SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== vBulletin LAST.PHP SQL Injection Vulnerability ============================================== Example:...

vBulletin - 'LAST.php' SQL Injection

Example: http://www.example.com/last.php?fsel=,user.password%20as%20title,user.%20%20%20%20username%20as%20lastposter%20FROM%20user,thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT%201 milw0rm.com 2004-11-15...

phpbugtraq.txt

| | | | | \ | | | || | | | | | | | | |/ \ \ /\ / / | | | / | '| |/ / | | | | \ V V / | |/ / | | | | | |// // |/ ,|| ||\ http://www.howdark.com ---------------------------------------------------------------------------------------------------------------------------------- // Information...

TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/11598/info MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and script code in a user's browser throug...

W-Agora 4.1.6a - 'subscribe_thread.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL injection, cross-site scripting, a...

W-Agora 4.1.6a - subscribe_thread.php HTTP Response Splitting

W-Agora 4.1.6a - subscribethread.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these...

W-Agora 4.1.6 - a forgot_password.php?userid Cross-Site Scripting

W-Agora 4.1.6 - a forgotpassword.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these...

PD9 Software MegaBBS 2.02.1 - ladder-log.asp Multiple SQL Injections

PD9 Software MegaBBS 2.02.1 - ladder-log.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP...

PD9 Software MegaBBS 2.0/2.1 - 'view-profile.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

PD9 Software MegaBBS 2.0/2.1 - 'thread-post.asp' Multiple Header CRLF Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

OpenCA Security Advisory: Cross Site Scripting vulnerability

OpenCA Security Advisory: Cross Site Scripting vulnerability Authors Martin Bartosch [email protected] Michael Bell [email protected] 2004-09-01 Initial revision 2004-09-06 Public release Summary ------- The OpenCA Project is a collaborative effort to develop a robust, full-feature...

TorrentTrader 1.0 RC2 SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================== TorrentTrader 1.0 RC2 SQL Injection Exploit =========================================== !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com...

webapp.traversal.txt

WebAPP is advertised as the internet's most feature rich, easy to run PERL based portal system. Its home site is at http://www.web-app.org/ Some features are : -Easy to Install on standard Unix servers! Windows user-supported only! -User Profiles -Message forums -Private messaging between members...

AntiBoard 0.60.7 - antiboard.php?feedback Cross-Site Scripting

AntiBoard 0.60.7 - antiboard.php?feedback Cross-Site Scripting source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a...

Layton Technology HelpBox 3.0.1 - Multiple SQL Injections

Layton Technology HelpBox 3.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/10776/info It is reported that HelpBox is susceptible to multiple SQL injection vulnerabilities. This issue is due to improper sanitization of user-supplied data. These problems present themselves...