DEBIAN-CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2008-7220

PrototypeJS (prototype.js) prior to 1.6.0.2 has an unspecified vulnerability that could permit a remote attacker to perform cross-site Ajax requests via unknown vectors. The issue is referenced in multiple sources, including IBM security notices for IBM Cloud Pak System variants (recommending upg...

CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2009-3121

Cross-site scripting XSS vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors...

CVE-2009-3122

The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors...

CVE-2009-3121

Cross-site scripting XSS vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3122

The CVE-2009-3122 entry concerns the Ajax Table module 5.x for Drupal, which does not perform access control. This unspecified-vectors flaw allows remote attackers to delete arbitrary users and nodes. The description confirms the vulnerable component and the impact (unauthorized deletion) but pro...

CVE-2009-3121

The CVE-2009-3121 entry describes a cross-site scripting (XSS) vulnerability in the Drupal Ajax Table module 5.x. The affected component is the Ajax Table module (Drupal) version 5.x; the root cause is not detailed beyond generic XSS in the module. Impact is described as allowing remote attackers...

LiveStreet Cross Site Scripting

============================================== LiveStreet Xss inj3ct0r.com Vulnerable Exploit ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

SA-CONTRIB-2009-053 - Ajax Table - Multiple vulnerabilities

The Ajax Table module allows one to create AJAX-refreshable tables by supplying a few parameters. Access bypass The module lacks access checks, which makes it possible for any user to delete arbitrary users and nodes. The module contains a number of security issues. Cross site scripting The modul...

Ajax Short URL SQL Injection

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script - Authentication Bypass

Ajax Short URL Script - Authentication Bypass - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Ajax Short URL Script Auth Bypass SQL Injection Vulnerability =============================================================== - Discovered By: Cicklow - Date: 03.08.2009...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...

Ajax Short URL Script - Authentication Bypass

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login milw0rm.com 2009-08-03...

CVE-2009-2587

Multiple cross-site scripting XSS vulnerabilities in DragDropCart allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to assets/js/ddcart.php, the 2 prefix parameter to includes/ajax/getstate.php, the search parameter to 3 index.php and 4 search.php, the 5 redire...

DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...