102 matches found
MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln
No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...
MRCGIGUY Message Box 1.0 - Insecure Cookie Handling
--------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...
MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling
--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY SimpLISTic SQL 2.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com...
CVE-2006-4104
Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."...
CVE-2006-4104
Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."...
CVE-2006-4104
The CVE-2006-4104 entry describes a Cross-site Scripting (XSS) vulnerability in MojoGallery’s admin.cgi. The underlying issue is an input handling flaw in the password input field that permits injection of arbitrary web script or HTML, enabling an attacker to potentially execute scripts in the co...
CVE-2006-4087
Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-4087
CVE-2006-4087 describes a cross-site scripting (XSS) vulnerability in the admin.cgi component of mojoGallery (mojoscripts.com). The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The NVD records a CVSSv2 base score of 4.3 (medium severity), wi...
CVE-2006-4087
Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
[SA21438] MojoGallery "admin.cgi" Cross-Site Scripting Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
MojoScripts' xss vulnerable
SOFTWARE: ========= MojoScripts' mojoGallery All version DESCRIPTION: ============ dork: "Powered by mojoGallery" add to last path /admin.cgi , admin and password input scriptalert"lol"/script or all html tags ===================== mail: [email protected] , [email protected] web:...
admin.cgi overflow
The Shoutcast server crashes when a too long argument is given to admin.cgi SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ultimateCGI.txt
The ultimate CGI Guestbook Scripts MegaBook V2.0 appears vulnerable to Cross Site Scripting, which will allow the attacker to modify the post in the guestbook. The affected scripts is admin.cgi URL: http://www.yourdomain.com/yourcgidir/admin.cgi I have tested the script with the following query:...
CVE-2005-1494
CVE-2005-1494 concerns multiple cross-site scripting (XSS) vulnerabilities in MegaBook 2.0 and 2.1, exploitable via admin.cgi through the (1) entryid or (2) password parameter. According to the entry, remote attackers can inject arbitrary web script or HTML, with CVSSv2 metrics indicating a netwo...
CVE-2005-1494
Multiple cross-site scripting XSS vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 entryid or 2 password parameter...
CVE-2005-1494
Multiple cross-site scripting XSS vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 entryid or 2 password parameter...
MegaBook V2.0 - Cross Site Scripting Exploit
The ultimate CGI Guestbook Scripts MegaBook V2.0 appears vulnerable to Cross Site Scripting, which will allow the attacker to modify the post in the guestbook. The affected scripts is admin.cgi URL: http://www.yourdomain.com/yourcgidir/admin.cgi I have tested the script with the following query:...
Excite for Web Servers (EWS) AT-admin.cgi Remote Password Disclosure
Binary data 1634.prm...
SHOUTcast Server admin.cgi Long Argument Overflow
The remote SHOUTcast Server crashes when an overly large number of backslashes is passed as an argument to its 'admin.cgi' script. An unauthenticated, remote attacker can leverage this issue to crash the affected service or possibly even execute arbitrary code on the affected host. %NASLMINLEVEL...
ImageFolio 2.2x/3.0/3.1 - 'Admin.cgi' Directory Traversal
source: https://www.securityfocus.com/bid/7828/info ImageFolio 'admin.cgi' has been reported prone to a directory traversal vulnerability. By supplying directory traversal sequences, as a URI parameter, to the 'admin.cgi' script an attacker may break out of the web root directory. Successful...