Aardvark Topsite XSS vulnerability

Hi, I found XSS on Aardvark Topsites PHP system. Dork: "Powered by Aardvark Topsites" "SQL Queries" XSS: sitepath/index.php?a=search&q=2220onmouseover3dalertString.fromCharCode88,83,8320par3d22 Can use POST to effect the "email", "title", "u" and "url" parameters either on the same way. Tested...

php 5.2.0 信息泄漏漏洞

No description provided by source...

CVE-2009-2302

Cross-site scripting XSS vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected...

PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ============================================================= PHP // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre,...

[SECURITY] [DSA 1295-1] New php5 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1295-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2007 http://www.debian.org/security/faq -...

PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit

Exploit for linux platform in category local exploits ======================================================= PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit ======================================================= ?php //////////////////////////////////////////////////////////////////////...

PHP <= 5.2.0 ext/filter FDF Post Filter Bypass Exploit

Exploit for multiple platform in category remote exploits ====================================================== PHP alert/XSS/;"; $POST'var2' = " ' UNION SELECT "; $url = "http://127.0.0.1/info.php"; // You do not need to change...