Unfixed XSS vulnerability at www.uni-on.es

Security researcher 444Team, has submitted on 11/02/2009 a cross-site-scripting XSS vulnerability affecting www.uni-on.es, which at the time of submission ranked 1056454 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currentl...

Unfixed XSS vulnerability at forumkings.com

Security researcher Rockwell, has submitted on 21/10/2009 a cross-site-scripting XSS vulnerability affecting forumkings.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...

Unfixed XSS vulnerability at cercador.gencat.cat

Security researcher hades, has submitted on 10/07/2009 a cross-site-scripting XSS vulnerability affecting cercador.gencat.cat, which at the time of submission ranked 6814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...

Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns aka TreeColumns of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."...

Ed Charkow's Supercharged Linking SQL Injection

!/usr/bin/perl ========================================================================================== o Ed Charkow's Supercharged Linking Blind SQL Injection Exploit Software : Ed Charkow's Supercharged Linking Buy Script : http://www.infodepot3000.com/Scripts/content/superchargedlinking.html...

Unfixed XSS vulnerability at enews.mcot.net

Security researcher c0dy, has submitted on 22/08/2009 a cross-site-scripting XSS vulnerability affecting enews.mcot.net, which at the time of submission ranked 28397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Portel 2008 - decide.php?patron Blind SQL Injection

Portel 2008 - decide.php?patron Blind SQL Injection ------------------------------------------------------------------------------ Portel patron Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email :...

RunCMS 1.6.3 - Remote Shell Injection

RunCMS 1.6.3 - Remote Shell Injection !/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org...

Unfixed XSS vulnerability at dev.helma.org

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting dev.helma.org, which at the time of submission ranked 611306 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currentl...

CVE-2009-2165

SerendipityNZ aka SimpleBoxes Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id...

Unfixed XSS vulnerability at ready.mobi

Security researcher PaPPy, has submitted on 18/06/2009 a cross-site-scripting XSS vulnerability affecting ready.mobi, which at the time of submission ranked 56726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/10/2010. It is currently...

Virtue Classifieds (category) SQL Injection Vulnerability

No description provided by source. CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Escon SupportPortal Pro 3.0 SQL Injection

Autor : OzX Sitio : Foro.Undersecurity.net Cms : Escon SupportPortal Pro Version : 3.0 Sitio: http://www.e-supportportal.com Tipo Vulnz : Blind Sql Injection Archivo : forum.php Parametro Vulnerable 1 : cat Parametro Vulnerable 2 : tid Source Vulnz forum.php: 60 - if$REQUEST"a"=="rss" 61 -...

Unfixed XSS vulnerability at www.deathswitch.com

Security researcher Uber0n, has submitted on 18/05/2009 a cross-site-scripting XSS vulnerability affecting www.deathswitch.com, which at the time of submission ranked 884058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at www.tasty-recipes.org

Security researcher x0x, has submitted on 30/04/2009 a cross-site-scripting XSS vulnerability affecting www.tasty-recipes.org, which at the time of submission ranked 1597204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

php: XSS via PHP error messages

Cross-site scripting XSS vulnerability in PHP, possibly 5.2.7 and earlier, when displayerrors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208...

glFusion 1.1.2 - COM_applyFilter()order SQL Injection

glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...

Unfixed XSS vulnerability at www.decaturalabamausa.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.decaturalabamausa.com, which at the time of submission ranked 3782718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Unfixed XSS vulnerability at inthevip.com

Security researcher nicholson, has submitted on 03/07/2009 a cross-site-scripting XSS vulnerability affecting inthevip.com, which at the time of submission ranked 27644 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently...