CVE-2007-4523

Multiple cross-site scripting XSS vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c...

DeskPRO Admin Panel Multiple HTML Injections

HSC DeskPRO Admin Panel Multiple HTML Injections An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks....

ziyar-xss.txt

Ziyaretçi Defteri v1.0 XSS Vulnerability Software: Ziyaretçi Defteri v1.0 download: http://www.aspindir.com/goster/5059 demo: http://russian.buyuksari.com/ Found By: GeFORC3 G3 Exploit: 1-http://www.example.com/scriptpath/main.asp Ýsim : alert"G3"; E-mail : [email protected] Mesaj : alert"G3";...

CartWeaver (Details.cfm ProdID) Remote SQL Injection Vulnerability

No description provided by source. author:meoconxatvnbrain.net product:CartWeaver main site:www.cartweaver.com 1.with CFM CartWeaver: sql injection in: Details.cfm?ProdID=a' demo: http://www.jbracing.co.uk/Details.cfm?ProdID=1' exploit: http://www.xxx.com/Details.cfm?ProdID=sql query link admin:...

CVE-2007-4153

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...

CVE-2007-4153

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...

CVE-2007-4153

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...

CVE-2007-4153

CVE-2007-4153 affects WordPress 2.2.1 and describes multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel (options.php) or (2) the opml_url parameter to...

CVE-2007-4079

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

[email protected]

PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...

Webyapar 2.0 - Multiple SQL Injections

/$$$$$$$$$$$////$$$$$$$$$$$///////////////$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/ ////////$$$$$$$$//////////$$$$$$$$/////////////////$$$$$//$$$$/////////////$$$$//////////// ////////$$$$$$$////////////$$$$$$$///////////////////////////$$$$$//$$$$/////////////$$$$////////////...

Webyapar 2.0 - Multiple SQL Injections

Webyapar 2.0 - Multiple SQL Injections /$$$$$$$$$$$////$$$$$$$$$$$///////////////$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/ ////////$$$$$$$$//////////$$$$$$$$/////////////////$$$$$//$$$$/////////////$$$$////////////...

CVE-2007-3789

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

mzkblog-sql.txt

MzK Blog tr SQL Injection Vuln Software: MzK Blog tr download: http://www.aspindir.com/goster/5013 demo: http://www.karahanbilgisayar.com/blog/ Found By: GeFORC3 | G3 Exploit: http://site.com/scriptpath/katgoster.asp?katID=-1+union+select+0,kullaniciadi,2,3,4,5,6,7+from+admin...

YouTube Clone Script (msg.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ YouTube Clone Script SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

YouTube Clone Script (msg.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== YouTube Clone Script msg.php id Remote SQL Injection Vulnerability ====================================================================...

youtube-sql.txt

--==+================================================================================+==-- --==+ YouTube Clone Script SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Buddy Zone <= 1.5 Multiple SQL Injection Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR:...

Buddy Zone 1.5 - Multiple SQL Injections

Buddy Zone 1.5 - Multiple SQL Injections --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==--...