300 matches found
CreateLive CMS Version 4.0 0day-vulnerability warning-the black bar safety net
Source: xnice blog CreateLive CMS Version 4.0 0day.doc by:xiaok q:391232032.771044833 time: 2008-2-4 0 2:1 0 XP SP2 ie7 iis5. 1...... A tribute to D. S. T you gay, cause Hell-Phantom, the actuator on thin ice, causing the old D, The actuator Doom, causing the group to get help with the culture of...
Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System
No description provided by source. Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System 1. Advisory Information Title: Multiple XSS and Injection Vulnerabilities in TestLink...
Multiple XSS Injection Vulnerabilities in TestLink Test Management
Exploit for unknown platform in category web applications ======================================================================================= Multiple XSS Injection Vulnerabilities in TestLink Test Management and Execution System...
Shoutbox 1.0 HTML / Xss Injection
Exploit for unknown platform in category web applications ================================= Shoutbox 1.0 HTML / Xss Injection ================================= Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR Vendor: http://www.plohni.com exploit:...
Shoutbox 1.0 - HTML / Cross-Site Scripting Injection
Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select your name and your text put this code '"alert'XSS skh'...
Shoutbox 1.0 - HTML Cross-Site Scripting Injection
Shoutbox 1.0 - HTML Cross-Site Scripting Injection Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select you...
Online Guestbook Pro 5.1 Cross Site Scripting
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Online Guestbook Pro 5.1 Multiple Remote Xss Injection Based on : http://packetstorm.linuxsecurity.org/0907-exploits/ogp51-xss.txt + Author : 599eme Man...
Linkubator XSS / SQL Injection
+=================================================================+ xTitle : linkubator catid Blind Sql & xss Injection Vulnerability xSoftware : linkubator xDescription : Free Link Exchange for Clients & Friends of Green Web Design xVendor : http://www.linkubator.ws xVersion : unknown xDate : 26...
rgboard v4 5p1 (07.07.27) Multiple Remote Vulnerabilities
No description provided by source. rgboard v4 5p1 07.07.27 Multiple Vulnerability bY [email protected] / rgboard VERSION v4 07.07.27is widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find a XSS vuln ,LFI vuln and RFI vuln. I...
XEROX DocuShare URL XSS Injection Vulnerabilities
XEROX DocuShare URL XSS Injection Vulnerabilities Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
xerox-xss.txt
XEROX DocuShare URL XSS Injection Vulnerabilities Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
cuteflow-sqlxss.txt
CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities sql injection & Xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...
DSECRG-08-006.txt
It is updated version of advisory. updated info in "Fix Information" part, mistake in vendor name. Digital Security Research Group DSecRG Advisory DSECRG-08-006 Application: Nucleus CMS Versions Affected: 3.31 Vendor URL: http://nucleuscms.org Bugs: XSS Injection in URL Exploits: YES Reported:...
Nucleus 3.31 XSS in path
Hello. Digital Security Research Group DSecRG Advisory DSECRG-08-006 Application: Nucleus CMS Versions Affected: 3.31 Vendor URL: http://nucleuscms.org Bugs: XSS Injestion in URL Exploits: YES Reported: 16.01.2008 Vendor response: 18.01.2008 Date of Public Advisory: 29.01.2008 Authors: Alexandr...
INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / / . / /// // / / // / / / /// / / / / / // / / / / / / / / / / / / / / / / / // / / / / // / // / / / // 2007 //// // // // // / . -...
openSUSE 10 Security Update : seamonkey (seamonkey-3986)
This update fixes several security issues in Mozilla SeaMonkey 1.0.9. Following security problems were fixed : - MFSA 2007-18: Crashes with evidence of memory corruption The usual collection of stability fixes for crashes that look suspicious but haven't been proven to be exploitable. 25 were in...
sip-pwn.txt
SIP, the IETF endorsed VoIP signaling protocol, is currently used to establish and manage VoIP calls. Many security issues have been addressed until know about the security of VoIP due to the large numbers of attacks coming from the traditional IP networks, but none have addressed the securing th...
LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== LiveCMS = 3.4 categoria.php cid Remote SQL Injection Exploit =============================================================== !/usr/bin/perl / \ / \ | | | | | | | | | | | / | |...
LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection,&nbs...
Mozilla products allows the src attribute in an img element to be changed to a JavaScript URI
Overview Mozilla products contain a cross-site scripting vulnerability due to a vulnerability in the way IMG elements are loaded. Description A vulnerability in the way Mozilla products load IMG elements in a frame may cause a cross-site script injection. According to Mozilla Foundation Security...