654 matches found
Joomla Videos 1.0.0 SQL Injection
Joomla Component comvideos SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Videos comvideos" Version: "1.0.0" Author: "Newgekko" Author E-mail: "[email protected] " Author URL: "www.newgekko.com"...
Unfixed XSS vulnerability at www.jugglingdb.com
Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.jugglingdb.com, which at the time of submission ranked 264781 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...
Joovili 3.1 - 'browse.videos.php' SQL Injection
-Joovili- Rem0te SQL Injection Vulnerability IN == browse.videos.php Author: HaCkeR-EgY H^0mE: WWW.PAL-HACKER.COM , ATSDP.COM CONTact: [email protected] ================================================ Script : Joovili version : Version 3.1.0 price :$155 USD DOWNL0AD : www.joovili.com...
Unfixed XSS vulnerability at www.comegetyousome.com
Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.comegetyousome.com, which at the time of submission ranked 37308 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It is...
youtube-bypass2.txt
Youtube.com requires account creation and login before allowing visitors to view videos flagged by users as inappropriate. Sample flagged video: http://www.youtube.com/watch?v=pJg0MYnndnw "This video or group may contain content that is inappropriate for some users, as flagged by YouTube's user...
PHP Director Videos.PHP SQL注入漏洞
PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...
youtube-bypass.txt
Youtube.com requires account creation and login before allowing visitors to view videos flagged by users as inappropriate. Sample flagged video: http://www.youtube.com/watch?v=Chei2buYo9s "This video may contain content that is inappropriate for some users, as flagged by YouTube's user community...
CVE-2007-0674
Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service device hang via a malformed JPEG file...
Design/Logic Flaw
Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service device hang via a malformed JPEG file...
Hacking skills: in the Real movie put Trojan horse-vulnerability warning-the black bar safety net
Frequently encountered rm the movie plays when pop-up web pages, has been do not know how, a few days ago saw the mass of software in an article only to know the insertion and removal method, a good dongdong dare not exclusive, in the online search of the three articles, The to everyone. In the...
XMB Forum 1.9.5-Final XSS
XMB Forum 1.9.5 I have not tested this on earlier versions allows users to embed flash .swf videos in their posts. Normally, you could set an option on the object tag to say that ActionScript cannot run, but in this case we don't. The way we execute our code is by making a flash movie containing...
Zainu 2.x SQL inj. vuln.
Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...
