300 matches found
QuoteOrdering System 1.0 - ordernum Multiple Vulnerabilities
QuoteOrdering System 1.0 - ordernum Multiple Vulnerabilities Title : QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple Vulnerabilities Author : ajann Contact : : S.Page : ... $$ : $250.00 SQL--------------------------------------------------------- Register & Login Before Injection...
phpFox XSS Injection
Exploit found by Maximize -- jjj.zkpber.pbz -- ------------------------------------------------------------------- Step1: When editing your profile, in the about me section put the following code img src="http://xss.xss/xss.jpg" z=' Step2: In the field under the About me section put the following...
[KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables
ORIGINAL ADVISORY: http://myimei.com/security/2006-06-20/coppermine-148parameter-cleanup-system-bypassregistering-global-varables.html VENDOR INFORMED ——————-Summary—————- Software: CPG Coppermine Photo Gallery Sowtware’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class:...
Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities
=========================================================== Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0605-001, May 30, 2006...
CVE-2006-2249
Multiple cross-site scripting XSS vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 story, or 3 title parameters...
PassMasterFlex (and PassMasterFlex+) XSS injection
PassMasterFlex and PassMasterFlex+ XSS injection Discovered by: Nomenumbra Date: 5/4/2006 impact:moderate privilege escalation,possible defacement PassMasterFlex+ is a database-driven multiple login that utilizes cookies for authentication. PassMasterFlex+ was written not only to provide an...
X7Chat <= 2.0.2 avatar XSS injection
X7Chat = 2.0.2 avatar XSS injection Discovered by: Nomenumbra Date: 6/4/2006 impact:moderate privilege escalation,possible defacement X7Chat versions 2.0.2 and below are prone to XSS injection in a user's avatar. By setting this as the url of your avatar: javascript:alert'xss' you'd have some goo...
SF-UsersXSS.txt
SF-Users V1.0 XSS injection Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement The username with which you sign up isn't properly sanitized so it's possible to insert some javascript there. The single quote is filtered so we'll have to use ' or %27. ...
SF-Users V1.0 XSS injection
SF-Users V1.0 XSS injection Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement The username with which you sign up isn't properly sanitized so it's possible to insert some javascript there. The single quote is filtered so we'll have to use ' or 27. A...
gmailXSSinject.txt
------=Part28477486378.1135858452675 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: base64 Content-Disposition: inline IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIwpH TWFpbFNpdGUgdmFyaWFibGUgQ3Jvc3MtU2l0ZSBTY3JpcHRpbmcgYW5kIHNjcmlwdCBpbmplY3...
PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: Medium Title: PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability Date: 31/03/2005 Vendor: PhpArena Vendor...
[XSS]/SQL Injection PHP-Nuke Edit/Save Message(s) Bug
================================================================= XSS/SQL Injection PHP-Nuke Edit/Save Messages Bug by bima ================================================================= Php-Nuke is a popular freeware content management system. Based on information at :...
Comment Board XSS Vulnerability
Comment Board XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Comment Board Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Comment Board works straight away with little or no configuration...
ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure
ZH2003-22SA security advisory: Zorum XSS Vulnerability and Path Disclosure Published: 11 august 2003 Released: 11 august 2003 Name: Zorum Affected Systems: v.3.4 Issue: Remote attackers can inject XSS script and know the path of the site. Author: G00db0y zone-h org Vendor:...
ZH2003-14SA (security advisory): aspBoard XSS Vulnerability
ZH2003-14SA security advisory: aspBoard XSS Vulnerability Published: 5 august 2003 Released: 5 august 2003 Name: aspBoard Affected Systems: 1.2 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://www.freezingcold.com Description Zone-h Security Team has...
vBulletin XSS Injection Vulnerability
.:: vBulletin XSS Injection Vulnerability vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. I discovered lately a Cross-Site Scripting issue that would allow attackers to inject maleficent codes into the pages and execute it on the clients...
XSS bug in vBulletin
Vulnerable systems: Jelsoft vBulletin 2.2.9 and prior Exploit: http://www.vbulletin.com/forum/memberlist.php? s=23c37cf1af5d2ad05f49361b0407ad9e&what=""Scriptjavascript:alert document.cookie/Script you can use this code thanx for SP.IC: ?PHP // vBulletin XSS Injection Vulnerability: Exploit // --...
CVE-2019-12186: XSS injection in the Grid component
More info at https://sylius.com/blog/cve-2019-12186/...