5825 matches found
timberland.txt
There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=alert'test'; Author: O...
ProPublish 2.0 - catid SQL Injection
ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
ProPublish 2.0 - 'catid' SQL Injection
ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion
Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen, Skulmatic, weleh, brokencode, bigmast...
phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability
No description provided by source. Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen,...
Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)
Exploit for unknown platform in category remote exploits =========================================================== Sasser Worm ftpd Remote Buffer Overflow Exploit port 5554 =========================================================== / / // / / / / \ / / / / / / / // // / // / // //// -...
CVE-2005-4785
Cross-site scripting XSS vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 author "your name" and 2 "comment" section...
ChangeLog-2.6.16.3
commit e2c78fb27dd13ab8c778a9689affe95c92030a32 Author: Greg Kroah-Hartman [email protected] Date: Mon Apr 10 22:27:44 2006 -0700 Linux 2.6.16.3 commit 5494bd6a500cc7c5a502279eabfbdacccd4b89d1 Author: David Howells [email protected] Date: Mon Apr 10 17:01:40 2006 +0000 PATCH Keys: Fix oops when...
[ECHO_ADV_28$2006] Clever Copy <= 3.0 Connect.inc Critical Information Disclosure
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV28$2006 --------------------------------------------------------------------------- ECHOADV28$2006 Clever Copy = 3.0 Connect.inc Critical Information Disclosure ---------------------------------------------------------------------------...
CVE-2006-1438
The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...
linksubmit <= All version Html Tag Injector in index.php
Vendor : linksubmit Version : All Version www : http://www.phpselect.com AUTHOR : s3rv3rhack3r you can submit html tag's in $description linksubmit.php Exploit : !/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx , f0rk ,sattar.li , stanic, mfox,blood moon and.. / | | | / / | |/ // / ...
CVE-2006-1562
Multiple cross-site scripting XSS vulnerabilities in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 autor, 2 www, 3 temat, and 4 tresc parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in webcheck before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the 1 url, 2 title, or 3 author name in a crawled page, which is not properly sanitized in the tooltips of a report...
simplogsploit.txt
summary software: simplog vendors website: http://daverave.64digits.com/home.php?page=simplog versions: directory transversal: http://example.com/index.php?act=blog&blogid=../somefile http://example.com/index.php?act=../somefile credit authors: retard and jim email: [email protected]...
PunBB <= 2.0.10 (Register Multiple Users) Denial of Service Exploit
Exploit for unknown platform in category web applications =================================================================== PunBB include include ifdef WINDOWS include include // Link to libws232.a else include include include endif define NSTALIVE 1 int Connectchar; void SendPackint, int, char...
DEBIAN-CVE-2006-0733
Cross-site scripting XSS vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as 1 onfocus and 2 onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue is only...
PT-2006-1785 · WordPress +1 · Wordpress +1
Name of the Vulnerable Software and Affected Versions: WordPress version 2.0.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as onfocus and onblur in the "author's website" field. It is suggested that th...
dbmanDefault.txt
Tunis the 31/jan/2006 bug found by Fireboy [email protected] Product affected:DBMan for Windows and Unix Product vendor: http://www.gossamer-threads.com the problem with DBman is default passwords these are default pass : admin/admin,author/author,guest/guest if the admin not change the pas...
