Technote 7.2 - Blind SQL Injection

Exploit Title: technote blind sql injection Google Dork: inurl:/technote7/board.php?board= Date: 2011.06.11 Author: BlueH4G http://blueh4g.org Software Link: http://www.technote.co.kr/php/technote1/board.php?board=consult&command=skininsert&exe=insertdownshop Version: technote7.2 && Mysql 3.x sor...

WordPress2.0.0-autorswebsite.txt

original advisory ——————-Summary—————- Software: WordPress Sowtware’s Web Site: http://www.wordpress.org Versions: 2.0.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by: imei addmimistrator Risk Level: Low —————–Description————— There is some security bug in...

CVE-2006-0733

This CVE affects WordPress 2.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw allowing injection of scripts via scriptable attributes (onfocus/onblur) in the author’s website field. The issue is noted as potentially exploitable only by the same user who injects the XSS, limiting practi...

CVE-2006-0733: Undefined Security Weakness

Cross-site scripting XSS vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as 1 onfocus and 2 onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue is only...

[myimei]WordPress2.0.0~autorswebsite~XSS attack

original advisory http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.htmlmore-14 ——————-Summary—————- Software: WordPress Sowtware’s Web Site: http://www.wordpress.org Versions: 2.0.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by:...