CVE-2007-6728

Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...

dedecms v5. 3 0day-vulnerability warning-the black bar safety net

The official has a patch, the relevant users, please timely correction 首发 :www.YDTeam.Com 1. Delete the Site any file. 2. Proof absolute path The impact of the system = DedeCMS V5. 3 1. Delete any file. Registration of normal users...feel free to find a place to upload an attachment it is OK. Par...

Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Elgg XSS/CSRF/Change Password Multiple Remote Vulnerabilities =============================================================== + CMS Elgg uploading to a host.Save as cookie.php...

DB Top Sites 1.0 - Remote Command Execution

?php / ------------------------------------------------------------ + About DB Top Sites v1.0 Remote Command Execution Exploit Script homepage : http://www.jnmsolutions.co.uk/topsites/ Author : SirGod Thanks to : Nytro Website : www.mortal-team.org...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

BIGACE CMS 2.5 (username) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== BIGACE CMS 2.5 username Remote SQL Injection Exploit ====================================================== !/usr/bin/perl...

BigACE 2.5 - SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

CVE-2009-1264

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

Information disclosure

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

The CVE concerns TYPO3 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier, where access rights were not properly verified, allowing remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Affected versions are 2.5.20 and e...

CVE-2008-6631

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

Information Disclosure in third party extension "Frontend User registration"

It has been discovered that the TYPO3 extension "Frontend User Registration" srfeuserregister is susceptible to Information Disclosure. Release Date: April 6, 2009 Component Type: Third party extension. This extension is not a part of a TYPO3 default installation. Affected Versions: 2.5.20 and al...

Yxbbs3. 0 two injection vulnerabilities-vulnerability warning-the black bar safety net

Posted:Xiaoqiang Affected version: Yxbbs3. 0 Vulnerability description: yxbbs at the time of user registration, real-time detection of whether the user name already exists and the user name is legitimate, however the service end at the time of detection, the user-submitted data validation is not...

CVE-2008-6459

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459

CVE-2008-6459 affects TYPO3’s auto BE User Registration (autobeuser) extension 0.0.2 and earlier. The issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, integrity, and availability....

[BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1

BLUE MOON SECURITY ADVISORY 2009-03 =================================== :Title: Multiple vulnerabilities in OpenSite v2.1 :Severity: Critical :Reporter: Blue Moon Consulting :Products: OpenSite v2.1 :Fixed in: to be fixed in 3.0 Description ----------- OpenSite is an Open Source Content Managemen...

Star Articles 6.0 - Remote Contents Change

Star Articles 6.0 - Remote Contents Change ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH...