onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

Unfixed XSS vulnerability at www.gmccollection.com

Security researcher jean-claude, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.gmccollection.com, which at the time of submission ranked 2076797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2008. It...

Unfixed XSS vulnerability at search2.computer.org

Security researcher xylitol, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting search2.computer.org, which at the time of submission ranked 11240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

bug report

Author: Hadi Kiamarsi Exploit By : Hadi Kiamarsi Email : [email protected] CMS: chicomas.2.0.4 Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip web site : http://ircrash.com File Inclusion Local & Remote Bugs : Local File Inclusion:...

Unfixed XSS vulnerability at www.wingate.org.il

Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting www.wingate.org.il, which at the time of submission ranked 741159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It...

Unfixed XSS vulnerability at www.findevent.org

Security researcher Uber0n, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.findevent.org, which at the time of submission ranked 12052840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Fixed XSS vulnerability at www.wcm.at

Security researcher Viper.aT, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.wcm.at, which at the time of submission ranked 54497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

Unfixed XSS vulnerability at www.sustainweb.org

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.sustainweb.org, which at the time of submission ranked 889720 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...

Unfixed XSS vulnerability at www.futurevision.com.ua

Security researcher Stacker, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.futurevision.com.ua, which at the time of submission ranked 550026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is...

Unfixed XSS vulnerability at www.anfe.fr

Security researcher xylitol, has submitted on 04/06/2008 a cross-site-scripting XSS vulnerability affecting www.anfe.fr, which at the time of submission ranked 3268458 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Prozilla Reviews Script 1.0 - Arbitrary Delete User

Prozilla Reviews Script 1.0 - Arbitrary Delete User --==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==--...

Multiple XSS in DigiDomain

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

Alkacon OpenCms users_list.jsp searchfilter XSS

Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...

Unfixed XSS vulnerability at revivetube.com

Security researcher Zeitjak, has submitted on 03/10/2008 a cross-site-scripting XSS vulnerability affecting revivetube.com, which at the time of submission ranked 828953 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currentl...

Unfixed XSS vulnerability at www.myleague.com

Security researcher Phanter-RooT, has submitted on 03/04/2008 a cross-site-scripting XSS vulnerability affecting www.myleague.com, which at the time of submission ranked 22989 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at www.scsmods.com

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.scsmods.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixe...

phpnukegen-sql.txt

PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...

Unfixed XSS vulnerability at www.cliffsnotes.com

Security researcher SolarFlare, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.cliffsnotes.com, which at the time of submission ranked 20092 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at bitefight.it

Security researcher Ic3Drag0n, has submitted on 19/02/2008 a cross-site-scripting XSS vulnerability affecting bitefight.it, which at the time of submission ranked 14713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

CVE-2008-0417

CVE-2008-0417 is a CRLF injection vulnerability affecting Mozilla Firefox prior to 2.0.0.12 (and related Mozilla-based products such as SeaMonkey/XULRunner). The issue allows a remote website to corrupt the password store by submitting newline characters during password saving. Connected advisori...