CVE-2007-1837: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the SitePath parameter to 1 boxes/quotes.php or 2 templates/mangobery/footer.sample.php...

MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability

No description provided by source. Mangobery-0.5.5 Found by kezzap66345 Script Page:http://mangobery.sourceforge.net/ Demo Site:http://mangobery.beryllium.ca/ Script Download:http://sourceforge.net/project/showfiles.php?groupid=63834&packageid=60858...

TigerTom Scripts

TigerTom Scripts Homepage: http://www.ttfreeware.co.uk/ Affected files: TTCalc script v1.0 --------------------------- Data pased in the "Length of loan, years" and "Length of mortgage, years" input boxes are not sanatized before being generated. For a PoC in the input boxes listed above simply...

boardhost.txt

Boardhost.com Description: Free Msgboard hosting service. Homepage: http://www.Boardhost.com Affected files Input boxes of posting a message Searching for a listing board ------------------------------------------------- XSS vuln with cookie disclosure when posting a msg Tested on boardhost.com's...

blacksingles.txt

Blacksingles.com Homepage: http://www.blacksingles.com Affected files Profile input boxes Add a friend input box. list.html view.html reply.html compose.html ------------------------------------------------- XSS vuln with cookie disclosure via the Location box. User data isn't sanatized before...

chatizens.txt

Chatizens.com Also known as Chattown.com Homepage: http://www.chatizens.com Affected files: Profile input boxes: All input boxes of your profile. Browsing the forums -------------------------------------------- XSS vuln with cookie disclosure via profile input boxes. To bypass chatizens filters o...

Somechess v1.5 rc1 - XSS

Somechess v1.5 rc1 Homepage: http://www.astrodogpress.org/chess/ Affected files: Profile input boxes ----------------------- Upon dumping the sql data into the table if you get errors and it wont create the tables & data like it did to me, then just remove all the " from the sql file. You'll also...

Cybersocieties.txt

Cybersocieties.com Homepage: http://www.cybersocieties.com Effected files: Input boxes in profile: - Full name box - Occupation box - MSN box - Yahoo box - AIM Box Viewing a profile ------------------------------------------------------ XSS vuln via input boxes in profile: No filter evasion is...

ratescene.txt

Ratescene.co.uk Homepage: http://www.ratescene.co.uk Affected files: input boxes of editing your profile ------------------------------------------------ Profile input boxes XSS vuln with cookie disclosure: Data isn't sanatized, try entering the code below: Screenshots:...

43things.txt

43things.com Homepage: http://www.43things.com Affected files: input box "I want to add to my list" posting a comment ---------------------------------------- XSS vuln via input text of the box "I want to" When you add an item thats already on your list. For a PoC we have style tags with broken u...

fxAPPXSS.txt

fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...

asianxoXSS.txt

AsianXO.com Homepage: http://www.asianxo.com/ Effected files: directory.php profiles.php Input boxes of editing profile ---------------------------- XSS Vulnerability via dirid: Directory.php PoC: http://www.axo2.com/directory.php?dirid=1" inaurl injection along with tags, which also reveals some...

mole.com.ua Ticket Booking Script - XSS

Ticket Booking Script Homepage: http://www.mole.com.ua Effected files: input boxes on booking2.php XSS Vulnerabilities: The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL...

E-Dating System from scriptsez.net - XSS

E-Dating System Homepage: http://www.scriptsez.net/ Effected files: Input boxes. cindex.php Description: A Professional dating system that uses flatfiles instead of MySQL. XSS Vulnerabilities PoC: The input boxes of sending a message, and editing your profile do not properally filter user input...

PBL Guestbook v1.31 - XSS

PBLGuestbook v1.31 Homepage: http://www.pixelatedbylev.com/ Effected files: input boxes of the guestbook. XSS Vulnerabilities PoC: I noticed that common tags like script are filtered into the words "SCRIPT BLOCKED" in this guestbook, however img tags as well as others go unfiltered in the Name,...

PHP ManualMaker v1.0

PHP ManualMaker v1.0 Homepage: http://deltascripts.com/phpmanualmaker/ Effected files: index.php Search boxes Comment boxes XSS proof of concept: Input in search or comment box: """'IMG SRC=javascript:alert&0000039XSS&0000039""'" XSS via URL injection of id:...

CVE-2006-2679: Undefined Security Weakness

Unspecified vulnerability in the VPN Client for Windows Graphical User Interface GUI aka the VPN client dialer in Cisco VPN Client for Windows 4.8.00. and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes,...

Cross site scripting

Cross-site scripting XSS vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 username, 2 password fields, or certain other input text boxes...

CVE-2006-2664

Cross-site scripting XSS vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 username, 2 password fields, or certain other input text boxes...

iFdate v1.2

sorry if youget this twice, the reply page timed out iFdate v1.2 Homepage: http://www.ifusionservices.co.uk/products/productifdate.php Description: Packed full of great features, it supports themes and looks sleek, your users will be able to create & customize their very own profile page, upload...