228 matches found
Vacation Rental Script 3.0 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Vacation Rental Script 3.0 id Remote SQL Injection Vulnerability ==================================================================...
Vacation Rental Script 3.0 - 'id' SQL Injection
????????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...
Unfixed XSS vulnerability at www.ultimatevacationdestinations.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatevacationdestinations.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. ...
webTA by kronos - XSS
http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...
webta-xss.txt
http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...
PT-2006-6644
Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...
popup Vacation Rentals[calendar_year.php] SQL Injection
By:BoNy-m [email protected] ---------------------- example:- /popup/calendaryear.php?rentalid=SQL Injection...
CVE-2006-2651
Cross-site scripting XSS vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter...
CVE-2006-2651
Cross-site scripting XSS vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter...
CVE-2006-2651
The CVE-2006-2651 entry documents a Cross-site Scripting (XSS) vulnerability in index.php of Vacation Rental Script 1.0. Attackers can inject arbitrary web script or HTML via the obj parameter. The vulnerability is described across multiple sources (NVD, CVE List, PRION, prion, etc.), confirming ...
Vacation Retal Script v1.0
Vacation Retal Script v1.0 Homepage: http://www.vacationrentalscript.com/ Description: Vacation Rentals is the best solution for your vacation rental online business. It’s easy to install, easy to use, provides lots of features and option details. Just check the online demo and convince yourself...
CVE-2005-0184
Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. dot dot in a get request...
CVE-2005-1321
Cross-site scripting XSS vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
[SA15073] Vacation Parent Frame Page Title Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Vacation Parent Frame Page Title Cross-Site Scripting...
CVE-2005-1321
The CVE-2005-1321 entry concerns the Horde Vacation module. Affected software: Horde Vacation prior to version 2.2.2. Vulnerability: Cross-site scripting (XSS) via the parent’s frame page title in the Vacation module. Impact: enables remote attackers to inject arbitrary web script or HTML. Root c...
CVE-2005-1321
Cross-site scripting XSS vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
Horde Vacation < 2.2.2 Parent Frame Page Title XSS
Binary data 2850.prm...