Unfixed XSS vulnerability at appserv.pace.edu

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting appserv.pace.edu, which at the time of submission ranked 35725 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is currentl...

Unfixed XSS vulnerability at radooga.org

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting radooga.org, which at the time of submission ranked 1290753 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It i...

calexp-xss.txt

hey guys .. check out this new xss i just found ;P Vulnerable : Calendar Express 2 web : http://www.ci.emeryville.ca.us/calendar, http://www.phplite.com/products/calendarexpress/ XSS :...

XSS in communityserver !

hey guys .. check out this new xss i just found ;P Vulnerable : communityserver Commercial edition web : http://communityserver.org/ XSS : http://localhost/path/search/SearchResults.aspx?q=223e3cscript3ealert27bl4ck273c2fscript3e&o=Relevance Discovered By BLacK ZeRo [email protected] Best regards...

Unfixed XSS vulnerability at www.firmaekle.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.firmaekle.com, which at the time of submission ranked 2292456 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at www.jivesoftware.com

Security researcher 0ssi3, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.jivesoftware.com, which at the time of submission ranked 55311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.ecadviser.com

Security researcher MaXWeL, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.ecadviser.com, which at the time of submission ranked 7670234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

ggcms-exec.txt

? // //Kacper & str0ke Settings $exploitname = "GGCMS = v1.1.0 RC1 Remote Auto Deface Exploit / Remote Code Execution Exploit"; $scriptname = "GGCMS v1.1.0 RC1"; $scriptsite = "http://ggcms.weblance.pl/"; $dork = '"Powered by GGCMS"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+...

Full Path Disclosure in Open-Realty ( v2.3.4 )

Hello Vulnerable : Open-Realty Verision : 2.3.4 Web : http://www.open-realty.org Exploit : http://www.example.com/script/index.php?action=listingview&listingID='anything' -------------------- Discoverey By LinuxDrox www.LeZr.Com/vb Best Regards ,,,,...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

Unfixed XSS vulnerability at www.fantasyplanet.cz

Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.fantasyplanet.cz, which at the time of submission ranked 145718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

CVE-2006-6350

Listpics 5 stores sensitive data under the web root due to insufficient access control, enabling remote attackers to download listpics.mdb via a direct request. Affected product: Listpics 5. Root cause: web-accessible database file (listpics.mdb) exposed without proper permissions. Impact: comple...

CVE-2006-6329

index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

PT-2006-6712 · 20/20 · 20/20 Datashed

Name of the Vulnerable Software and Affected Versions: 20/20 DataShed aka Real Estate Listing System affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the itemID parameter to "f-email.asp", or the peopleID an...

动网(DVBBS)tongji.asp文件未过滤注入漏洞

6 if request"orders"=1 then 7 call tongji 8 elseif request"orders"=2 then 9 call topuser ... 60 sub topuser 61 set rs=server.createobject"adodb.recordset" 62 sql="select top "&request"n"&" username,useremail,userclass,oicq,homepage,article,addDate from user order by article desc"...

easypageSQL.txt

vendor : easypage.org BY : s3rv3rhack3r www : hackerz.ir & h4ckerz.com bug : default.aspx?page=Search&app=Search&srch=sql and more...

xpoll110.txt

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...

DEBIAN-CVE-2006-4111

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOADPATH variable, a different vulnerability than CVE-2006-4112...

Microsoft IIS ASP Stack Overflow Exploit (MS06-034)

No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...