693 matches found
XT:Commerce <= 3.04 SP2.1 XSS Vulnerability
Exploit for php platform in category web applications =========================================== XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be executed. By getting the cookie of the admin, the attack...
XT:Commerce < 3.04 SP2.1 - Cross-Site Scripting
---------------------------------------------------------------------------------- Cross-Site-Scripting XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be executed. By getting the cookie of the admin, the...
CVE-2010-2007
Multiple cross-site request forgery CSRF vulnerabilities in LetoDMS formerly MyDMS 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use 1 op/op.EditUserData.php, 2 op/op.UsrMgr.php, 3 out/out.RemoveVersion.php, 4 op/op.RemoveFolder.php, 5...
InTerra Blog Machine <= 1.70 Shell Upload Vulnerability
Exploit for unknown platform in category web applications ======================================================= InTerra Blog Machine Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 +...
phpwebgallery-hijackexec.txt
$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see http://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...
PhpWebGallery comments.php sort_by Parameter SQL Injection
The remote host is running PhpWebGallery, an open source photo gallery application written in PHP. The installed version of PhpWebGallery fails to sanitize user-supplied input to the 'sortby' parameter of the 'comments.php' script before using it in a database query. Regardless of PHP's...
Nuked-klaN 1.7.7 SP4.4 - Multiple Vulnerabilities
Nuked-klaN 1.7.7 SP4.4 - Multiple Vulnerabilities URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered befor...
nukedklan-multi.txt
URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered before being inserted in nukedstatsvisitor table. If HT...
[Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
Title: Invision Power Board = 2.3.5 Multiple Vulnerabilities and Security Bypass Vendor: http://www.invisionpower.com/community/board/ Advisory: http://acid-root.new.fr/?0:18 Author: DarkFig gmdarkfig at gmail dot com Released on: 2008/08/29 Changelog: 2008/08/29 Summary: Introduction Blind SQL...
ScrewTurn-Wiki_08_008.txt
Portcullis Security Advisory 08008 Vulnerable System: ScrewTurn Wiki www.screwturn.eu. Vulnerability Title: Permanent Cross-site Scripting in the "System Log" page. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Ferruh Mavituna - Portcullis...
Maian Uploader v4.0 XSS Vulnerabilities
---------------------------------------------------------------- Script : Maian Uploader v4.0 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maianweblog-xss.txt
---------------------------------------------------------------- Script : Maian Weblog v4.0 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maiangreeting-sqlxss.txt
---------------------------------------------------------------- Script : Maian Greeting v2.1 Type : Multiple Vulnerabilities XSS/SQL INJECTION ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maianmusic-sqlxss.txt
---------------------------------------------------------------- Script : Maian Music v1.1 Type : Multiple Vulnerabilities Xss/SQL Injection ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maiansearch-sqlxss.txt
---------------------------------------------------------------- Script : Maian Search v1.1 Type : Multiple Vulnerabilities XSS/SQL INJECTION ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maiansupport-xss.txt
---------------------------------------------------------------- Script : Maian Support v1.3 Type : Xss Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maianuploader-xss.txt
---------------------------------------------------------------- Script : Maian Uploader v4.0 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
maianrecipe-xss.txt
---------------------------------------------------------------- Script : Maian Recipe v1.2 Type : Xss Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
Maian Links v3.1 XSS Vulnerabilities
---------------------------------------------------------------- Script : Maian Links v3.1 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
Maian Weblog v4.0 XSS Vulnerabilities
---------------------------------------------------------------- Script : Maian Weblog v4.0 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...