CVE-2010-1984

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the taxonomy term name in a Breadcrumb display...

CVE-2010-1976

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the node title in a Breadcrumb display...

Viennabux Beta Forum <= SQL injection Vulnerability & Injection Exploit

Exploit for php platform in category web applications ======================================================================= Viennabux Beta Forum = SQL injection Vulnerability & Injection Exploit =======================================================================...

AdManagerPro - Cross-Site Request Forgery (Add Admin)

AdManagerPro - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="...

Easy Banner Pro - Cross-Site Request Forgery (Add Admin)

Easy Banner Pro - Cross-Site Request Forgery Add Admin Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ in...

Frog v0.9.5 CSRF Vulnerability

Exploit for unknown platform in category web applications ============================== Frog v0.9.5 CSRF Vulnerability ============================== ------------------------------------------------------------------------------------------------- Application: Frog Version: 0.9.5 Download:...

GeN3 1.4 SQL Injection

Exploit autor : u.f. Scripts : GeN3 Version 1.4 site : http://www.ptcpay.com/shop/browseproducts.php dork : mainforum.php?cat= Powered by GeN3 Version 1.4 ex : www.site.com/patch/mainforum.php?cat=-8+union+all+select+1,concataUsername,char58,aPassword,3,4,5,6,7+from+admins--...

Web Admins Targeted in Phishing Attack

Scam e-mail artists have launched a massive campaign to trick webmasters into giving up the credentials needed to administer their Web sites, targeting site owners at more than 90 online hosting providers. Read the full article. Washington Post...

GeN3 forum V1.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== GeN3 forum V1.3 SQL Injection Vulnerability =========================================== / Software Information + Vendor : http://www.ptcpay.com + script : GeN3 Version 1.3 + Download :...

GeN3 forum 1.3 - SQL Injection

GeN3 forum 1.3 - SQL Injection Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE...

WordPress Zaps Security Bugs in 'Hardening Release'

The WordPress blog software has been upgraded to version 2.8.5 to backport a number of security hardening changes to make WordPress-powered blogs more secure. Here’s a glimpse of some of the security fixes being pushed out: A fix for the Trackback Denial-of-Service attack that is currently being...

CVE-2008-7096

Intel Desktop and Mobile boards BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allow local administrators with Ring 0 privileges to gain additional privileges and modify code running in System Management Mode, or access hypervisor memory, as demonstra...

Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln

No description provided by source. +Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note : Tüm Müslüman Camiasına...

Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln

Exploit for unknown platform in category web applications ============================================================= Uebimiau Webmail 3.2.0-2.0 Arbitrary Database Disclosure Vuln ============================================================= +Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type ...

Uebimiau Webmail 3.2.0-2.0 Database Disclosure

+Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note : Tüm Müslüman Camiasına Hayırlı Ramazanlar Dilerim...

Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure

Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure +Script Name : Uebimiau Webmail v3.2.0-2.0 +Bug Type : Arbitrary Admins Database Disclosure Vulnerability +D0rk : "Uebimiau Webmail v3.2.0-2.0" +Author : Septemb0x +Greetz : BHDR & BARCOD3 & MUHADRAM - Thanks : www.gonulerleri.org +Note :...

CVE-2008-6956

CVE-2008-6956 affects mxCamArchive 2.2 in the admin/admin.php component. It is a static code injection vulnerability that allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, with execution triggered by index.php. The C...

EZNewsletter 3 Database Disclosure

!/usr/bin/perl Application Name : EZNewsletter V3 Vulnerable Type : Arbitrary Database Disclosure Vulnerability Infection : Admins Database Download Script Downlaod : http://www.htmljunction.com/eznewsletterv3.zip author : Septemb0x Greetz BHDR, BARCOD3 use lwp::UserAgent; system'cls'; system'tit...

Pivot 1.40.4-7 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================== Pivot 1.40.4-7 Multiple Remote Vulnerabilities ============================================== Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 200...

Open-school 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...