Unfixed XSS vulnerability at www.student.se

Security researcher Uber0n, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.student.se, which at the time of submission ranked 81299 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

vbmarketing-lfi.txt

: Discovery by: Sw33t h4cK3r : POWERED BY: VB Marketing ----------- Exploit : http://Example.com/cgi-bin/tseekdir.cgi?location=/etc/passwd%00...

Unfixed XSS vulnerability at www.pinakothek.de

Security researcher Uber0n, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.pinakothek.de, which at the time of submission ranked 425570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.authorize.net

Security researcher C1c4Tr1Z, has submitted on 01/05/2008 a cross-site-scripting XSS vulnerability affecting www.authorize.net, which at the time of submission ranked 6760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

CVE-2007-6659

Multiple cross-site scripting XSS vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 contentshort or 2 contentfull parameter in an addnews action to the default URI; 3 the content parameter in a pm write action to 2z/admin.php; 4 the...

XCMS本地文件包含和任意文件上传漏洞

XCMS是一款基于PHP的WEB应用程序。 XCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容，及上传任意文件并执行。 问题是由于多个脚本对用户提交的WEB参数处理缺少充分过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XCMS 1.82 目前没有解决方案提供： http://www.xcms.it/index.php http://www.example.com/xcms/index.php?pg=admins=../../../../../etc/passwd\0...

Unfixed XSS vulnerability at kkanari.org

Security researcher tweetycoaster, has submitted on 28/12/2007 a cross-site-scripting XSS vulnerability affecting kkanari.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

Unfixed XSS vulnerability at www.storktec.com

Security researcher TreX, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.storktec.com, which at the time of submission ranked 2447689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currentl...

Unfixed XSS vulnerability at www.nsw2007.co.uk

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.nsw2007.co.uk, which at the time of submission ranked 9475884 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.fk.unair.ac.id

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.fk.unair.ac.id, which at the time of submission ranked 117249 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at yangyuying.ifensi.com

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting yangyuying.ifensi.com, which at the time of submission ranked 569 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at 33.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 33.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Unfixed XSS vulnerability at 49.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 49.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Unfixed XSS vulnerability at raid.alexstraszas-racker.de

Security researcher Uber0n, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting raid.alexstraszas-racker.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2007. It is...

Unfixed XSS vulnerability at www.kanalvip.com.tr

Security researcher cyber, has submitted on 11/11/2007 a cross-site-scripting XSS vulnerability affecting www.kanalvip.com.tr, which at the time of submission ranked 849533 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...

Unfixed XSS vulnerability at www.birdssilos.com.au

Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.birdssilos.com.au, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at akpartiseferihisar.com

Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting akpartiseferihisar.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at iid.org.ir

Security researcher br0d, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting iid.org.ir, which at the time of submission ranked 613967 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...