4468 matches found
CVE-2006-3071
Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...
CVE-2006-3033
Cross-site scripting XSS vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages...
Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...
Cross site scripting
Cross-site scripting XSS vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations...
CVE-2006-2965
Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...
CVE-2006-2965
Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...
CVE-2006-2965: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...
DEBIAN-CVE-2006-2779
Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...
Cross site scripting
Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...
CVE-2006-2673
Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...
CVE-2006-2673: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...
CVE-2006-1729
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by 1 inserting the target filename into a text box, then turning that box into a file upload control, or 2 changing the type of the...
musicBoxXSS.txt
Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='alertdocument.cookie http://example.com/music/index.php?action=top&show=5&type='alertdocument.cookie...
PHPLiveHelper 1.8 remote command execution (include) Xploit (perl)
Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...
XSS & SQL Injection in Music Box v2.3
Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...
CVE-2006-1222
Multiple cross-site scripting XSS vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the 1 memo box title, 2 user email, and 3 homepage fields...
CVE-2006-1222: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the 1 memo box title, 2 user email, and 3 homepage fields...
Network box netbox let the rookie easily have their own Super http Backdoor-vulnerability warning-the black bar safety net
A: Preface in today's Microsoft power era, looking for broilers has been not what difficult matter, a variety of fool tools greatly convenient for newbies in the invasion, but often the invasion is successful, how to do a good job the back door, put the broiler as long as the catch is often...
CVE-2006-0773
Cross-site scripting XSS vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function...
CVE-2006-0772: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function...