Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input...

Unfixed XSS vulnerability at directory.northjersey.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting directory.northjersey.com, which at the time of submission ranked 12667 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It i...

Unfixed XSS vulnerability at www.hotelbuk.com

Security researcher h3rcul3s1, has submitted on 19/02/2011 a cross-site-scripting XSS vulnerability affecting www.hotelbuk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Hastymail2 Detection (HTTP)

HTTP based detection of Hastymail2. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801575";...

Unfixed XSS vulnerability at www.givi.com.my

Security researcher VirtualSystEm, has submitted on 19/01/2011 a cross-site-scripting XSS vulnerability affecting www.givi.com.my, which at the time of submission ranked 2511327 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

Toolza 1.0

=== Toolza1.0 === Nix/Windows/Mac - UTF-8 perlscript download last version at the end of this post /последнюю версию скачать можно снизу этого поста Данная утилита предназначена для тестирования своего веб-ресурса на уязвимости. Любое другое использование скрипта преследуется по закону Last updat...

Unfixed XSS vulnerability at mp3lover.in

Security researcher Snypter Dhruv, has submitted on 01/12/2011 a cross-site-scripting XSS vulnerability affecting mp3lover.in, which at the time of submission ranked 5031284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

HotWeb Rentals "PageId" SQL Injection Vulnerability

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

Unfixed XSS vulnerability at ads.mmania.com

Security researcher warvector, has submitted on 24/12/2010 a cross-site-scripting XSS vulnerability affecting ads.mmania.com, which at the time of submission ranked 17963896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

Unfixed Redirect vulnerability at vakbarat.index.hu

Security researcher TinKode, has submitted on 16/12/2010 a Redirect vulnerability affecting vakbarat.index.hu, which at the time of submission ranked 1421 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If y...

Unfixed XSS vulnerability at www.qbike.com

Security researcher C0nw0nk, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www.qbike.com, which at the time of submission ranked 712068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

PHP Top Sites Cross Site Scripting / SQL Injection

PHP Top Sites Multiple SQL/XSS Vulnerability Author : kAsvææ | c0de Hunters Name : PHP Top Sites Bug Type : SQL/XSS Version :All Google Dork:"Powered By PHP TopSites" Home Page : http://itop10.net/ You can download it : http://webscripts.softpedia.com/script/Top-Sites/PHP-TopSites-41994.html SQL ...

Unfixed XSS vulnerability at www.alexmarshall.org

Security researcher 03storic, has submitted on 12/09/2010 a cross-site-scripting XSS vulnerability affecting www.alexmarshall.org, which at the time of submission ranked 8531912 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.library.yorku.ca

Security researcher Cir0, has submitted on 24/11/2010 a cross-site-scripting XSS vulnerability affecting www.library.yorku.ca, which at the time of submission ranked 11404 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

CVE-2010-3811

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element attributes...

Unfixed XSS vulnerability at wapgames.digi.com.my

Security researcher Wong Chieh Yie, has submitted on 13/11/2010 a cross-site-scripting XSS vulnerability affecting wapgames.digi.com.my, which at the time of submission ranked 15481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It...

Unfixed XSS vulnerability at gemsafarihawaii.com

Security researcher nullbyt3, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting gemsafarihawaii.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

Zomplog 3.9 Cross Site Scripting

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Unfixed XSS vulnerability at warszawa.adagio4.eu

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting warszawa.adagio4.eu, which at the time of submission ranked 5058573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...