SOFT64 PHP Whois XSS Vulnerability

No description provided by source. Exploit Title: SOFT64 PHP Whois XSS Vulnerability Date: 24/12/2009 Author: bi0 Software Link: http://blog.soft64download.com/files/ajax-whois.rar /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

CVE-2009-4233

Cross-site scripting XSS vulnerability in modules/modyjwhois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4233

Cross-site scripting XSS vulnerability in modules/modyjwhois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4233: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/modyjwhois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information...

Joomla Component TP Whois <= 1.5.x XSS

Exploit for unknown platform in category web applications ====================================== Joomla Component TP Whois Example3: Example4: Example4: Example5: Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gathe...

Whois Server 2.0 Cross Site Scripting

another link for the exploit if it dosent appeared clearly : http://hell-z0ne.org/whois.txt + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +===================================================================|| Whois Server Version 2.0 XSS Vulnerability || ! Author ...

Whois Server v2 XSS

No description provided by source. another link for the exploit if it dosent appeared clearly : http://hell-z0ne.org/whois.txt + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +===================================================================|| Whois Server Version...

[SECURITY] Fedora 9 Update: prewikka-0.9.14-2.fc9

Prewikka is a graphical front-end analysis console for the Prelude Hybrid IDS Framework. Providing numerous features, Prewikka facilitates the work of users and analysts. It provides alert aggregation and sensor and hearbeat views, and has user management and configurable filters. It has access t...

CS Whois Lookup 'ip' Parameter Remote Command Execution Vulnerability

CS Whois Lookup and CS DNS Lookup are prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. OpenVAS Vulnerability Test $Id: cswhois34700.nasl 5771...

CS Whois Lookup RCE Vulnerability (Apr 2009) - Active Check

CS Whois Lookup and CS DNS Lookup are prone to a remote command execution RCE vulnerability because the software fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CS Whois Lookup - ip Remote Command Execution

CS Whois Lookup - ip Remote Command Execution source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software an...

CS Whois Lookup Command Execution

CS Whois Lookup index.php ip Remote Command Execution Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Download : http://www.hotscripts.com/listings/jump/download/84580/ + Remote Command Execution Vulnerable code in index.php -----------------------------------------...

CS Whois Lookup - 'ip' Remote Command Execution

source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer...

Command injection

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6556: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

Really innocent? Peep Serv-U password-cracking-vulnerability warning-the black bar safety net

Now the invasion, get a WebShell is a very easy thing, especially with the WHOIS technical disclosure obtained after the WebShell is even more simple. There are times when the other server is set to be not very sick, we can use directly enter the hard drive path, so as to obtain access to access ...

Unfixed XSS vulnerability at www.selfseo.com

Security researcher C1c4Tr1Z, has submitted on 19/03/2008 a cross-site-scripting XSS vulnerability affecting www.selfseo.com, which at the time of submission ranked 39848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/05/2008. It is current...

CVE-2008-1041: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mwhois.php in Matt Wilson Matt's Whois MWhois allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

mattswhois-xss.txt

+==============================================================================+ + Matt's Whois mwhois.php - ALL Versions XSS Multiple Remote Vulnerabilities + +==============================================================================+ Authors: Ivan Sanchez & Maximiliano Soler. Product: MWho...

Unfixed XSS vulnerability at www.domaintechs.com

Security researcher X-Turk, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.domaintechs.com, which at the time of submission ranked 4481278 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...