2589 matches found
JupiterCMS.txt
Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to a page of his choice, effectively defacing the page:...
Jupiter CMS <= 1.1.5 multiple XSS attack vectors.
Jupiter CMS = 1.1.5 multiple XSS attack vectors. Discovered by: Nomenumbra/0x4F4C Date: 3/11/2006 impact:high privilege escalation,site defacement Jupiter CMS http://www.highstrike.net/ is a dynamic CMS system like mambo or limbo, allowing users to subscribe and posts events. Because no filtering...
Jupiter CMS <= 1.1.5 Multiple XSS Attack Vectors
Exploit for unknown platform in category web applications ================================================ Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to ...
Jupiter CMS <= 1.1.5 Multiple XSS Attack Vectors
No description provided by source. Jupiter CMS = 1.1.5 multiple XSS attack vectors. Discovered by: Nomenumbra/0x4F4C Date: 3/11/2006 impact:high privilege escalation,site defacement Jupiter CMS http://www.highstrike.net/ is a dynamic CMS system like mambo or limbo, allowing users to subscribe and...
Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to a page of his choice, effectively defacing the page:...
[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack
Hello Everybody ——–Summary——– Software: CuteNews Sowtware’s Web Site: http://cutephp.com Versions: 1.4.1 Class: Remote Status: Unpatched Exploit: Available Solution: NotAvailable Discovered by: imei addmimistrator Risk Level: Mediume&High ——-Description——- There is a security bug in CuteNews...
[myimei]WordPress2.0.0~autorswebsite~XSS attack
original advisory http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.htmlmore-14 ——————-Summary—————- Software: WordPress Sowtware’s Web Site: http://www.wordpress.org Versions: 2.0.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by:...
sNews - Comment Body Cross-Site Scripting
sNews - Comment Body Cross-Site Scripting source: https://www.securityfocus.com/bid/16647/info sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
[myimei]MyBB 1.0.2 XSS attack in search.php
original advisory: http://myimei.com/security/2006-01-14-mybb-102searchphpxss-attackandmore/index.html --------------- —————-Summary—————- Software: MyBB Sowtware’s Web Site: http://mybboard.com Versions: 1.0.2 Class: Remote Status: patched in 1.0.3 Exploit: Available Solution: Available Discover...
phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ==================================================== phpBB tag means that the cursor must pass it in the y direction only. e.g. the mouse only needs to cross a point horrizontaly equal to the link in order for the javascript to be executed...
MyBB 1.0.2 XSS attack in search.php redirection
http://127.0.0.1/mybb/search.php?action=dosearch&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="script language=javascriptalertdocument.cookie/script&sorder=1&showresults=threads&submit=Search...
MDKSA-2005:127-1 : mozilla-thunderbird
A number of vulnerabilities were reported and fixed in Thunderbird 1.0.5 and Mozilla 1.7.9. The following vulnerabilities have been backported and patched for this update: The native implementations of InstallTrigger and other XPInstall- related javascript objects did not properly validate that...
Baseline CMS vuln.
Baseline CMS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/baseline-cms-vuln.html vendor:http://www.nma.ca/ affected version: 1.95 and prior Product Description: Baseline CMS is a powerful, web-based content management system that gives yo...
GLSA-200512-03 : phpMyAdmin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200512-03 phpMyAdmin: Multiple vulnerabilities Stefan Esser from Hardened-PHP reported about multiple vulnerabilities found in phpMyAdmin. The $GLOBALS variable allows modifying the global variable importblacklist to open phpMyAdm...
QuickPayPro™ 3.1 Multiple vuln.
QuickPayPro™ 3.1 Multiple vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/quickpaypro-31-multiple-vuln.html vendor:http://quickpaypro.com/ affected version:3.1 and prior Product Description: QuickPayPro.com has been Online for over 3 years no...
LocazoList Classifieds 1.0 - 'SearchDB.asp' Input Validation
source: https://www.securityfocus.com/bid/15812/info LocazoList Classifieds is prone to an input validation vulnerability that allows cross-site scripting and SQL injection attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user i...
XSS vulnerabilities
PMASA-2005-8 Announcement-ID: PMASA-2005-8 Date: 2005-12-05 Summary XSS vulnerabilities Description It was possible to conduct an XSS attack via the HTTPHOST variable; also, some scripts in the libraries directory that handle header generation were vulnerable to XSS. Severity We consider these...
IMP Content-Type XSS Vulnerability
The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME messa...
Snitz Forums 2000 HTTP Response Splitting
The remote host is using Snitz Forums 2000 - an ASP based forum/bbs. There is a bug in this software which makes it vulnerable to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...
httpXSS.txt
The following web servers do not properly sanitize their output when returning a 404 resource not found error which could be used in a XSS attack: Orion 1.3.8 Orion 1.4.5 CompaqHTTPServer 2.1 PoC: http://localhost/alert'XSS' -- - Josh...