890 matches found
XOOPS 2.0.18 - modulessystemadmin.php?fct Traversal Local File Inclusion
XOOPS 2.0.18 - modulessystemadmin.php?fct Traversal Local File Inclusion source: https://www.securityfocus.com/bid/30330/info XOOPS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can...
Unfixed XSS vulnerability at tubearoo.com
Security researcher Futility, has submitted on 25/05/2008 a cross-site-scripting XSS vulnerability affecting tubearoo.com, which at the time of submission ranked 90858 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2008. It is currently...
creagold-xss.txt
CREAgold KÖY-ÝLÇE-DERNEK Portalý XSS Vulnerability Software: CREAgold KÖY-ÝLÇE-DERNEK Portalý download: not free 500 YTL sale: http://www.creapark.com.tr/koy.asp demo: http://goldkoy.creapark.com.tr Found By: GeFORC3 g3 Exploit: http://www.example.com/scriptpath/default.asp?sayfa=arama1&aranan=...
Unfixed XSS vulnerability at www.richinternet.de
Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.richinternet.de, which at the time of submission ranked 1099713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...
Unfixed XSS vulnerability at www.50states.com
Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.50states.com, which at the time of submission ranked 15133 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...
bloofox-xss.txt
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...
Unfixed XSS vulnerability at www.sportdog.gr
Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.sportdog.gr, which at the time of submission ranked 18014 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...
phpBB "charts.php" XSS and SQL-Injection
// phpBB "charts.php" hack XSS and SQL-Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/charts.php?action=vote&rate=1&id=XSS http://www.example.com/charts.php?action=vote&rate=1&id=SQL - Googledork:...
MyPHPNuke188.txt
--Security Report-- Advisory: MyPHPNuke http://site/reviews.php?op=reviews&letter=XSS EXAMPLE - http://site/reviews.php?op=reviews&letter=alert'X'; GET - http://site/download.php?sortby=&dcategory=XSS&sortby= EXAMPLE - http://site/download.php?sortby=&dcategory=alert'X'; -- Timeline: 24/02/2006:...
CVE-2005-4655
Cross-site scripting XSS vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the newsbody parameter, as demonstrated by elements such as "ta" and "ript"...
CVE-2005-2950
Cross-site scripting XSS vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP GET request...
e107 <= 0.617 XSS Remote Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ================================================== e107 = 0.617 XSS Remote Cookie Disclosure Exploit ================================================== / Post the below code into a new message. Credits to Nick Griffin. /str0ke /...
Ultimate PHP Board < 1.9.7 Multiple XSS
Binary data 3017.prm...
postnukeXSS.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Critical XSS 0.760-RC2=x cXIb8O3.2 Author: cXIb8O3Maksymilian Arciemowicz Date: 19.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...
Brooky CubeCart < 2.0.6 settings.inc.php XSS
Binary data 2653.prm...
[PersianHacker.NET 200505-06] paNews v2.0b4 XSS Vulnerability
PersianHacker.NET 200505-06 paNews v2.0b4 XSS Vulnerability Date: 2005 February Bug Number: 06 paNews is a news management script to use on your site. Users can use paCode, special code designed to allow the adding of images and font changes in the posts without allowing users to use HTML to post...
Sunshop < 3.4RC2 index.php search Parameter XSS
Binary data 2590.prm...
Serendipity < 0.7.1 compat.php searchTerm Parameter XSS
Binary data 2456.prm...
FreeBSD : icecast -- XSS Vulnerability (71)
The following package needs to be updated: icecast %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgb2cfb4001df011d9a8590050fc56d258.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...