CVE-2009-3355

CVE-2009-3355 is a cross-site scripting vulnerability in the Datetopia Buy Dating Site 1.0, specifically in profile.php. The issue arises from unsafely handling the s_r parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected software and component: Datetopia Buy Dati...

CVE-2009-3355: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...

CVE-2009-2785

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

Pc4Uploader 9.0 Remote Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pc4Uploader 9.0 Remote Blind SQL Injection Vulnerability ======================================================== From Kuwait PEACE =Vuln: pc4arb - pc4 Uploader = 9.0 Blind SQL...

Sql injection

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CafeEngine - catid SQL Injection

CafeEngine - catid SQL Injection // / / / CAFE ENGINE / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr HOME : http://www.snakespc.com VERSION : EASY CAFE ENGINE BUY SCRIPT : http://cafeengine.com/ Price : 10$ EXPLOIT :...

adman-sql.txt

Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 all muslims...

Unfixed XSS vulnerability at www.buy-host.com

Security researcher PaPPy, has submitted on 29/06/2008 a cross-site-scripting XSS vulnerability affecting www.buy-host.com, which at the time of submission ranked 1998433 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is current...

Unfixed XSS vulnerability at buy-isoptin.tk

Security researcher xylitol, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting buy-isoptin.tk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currently...

Pigyard Art Gallery Multiple Remote Vulnerabilities

No description provided by source. Pigyard Art Gallery Multiple Remote Vulnerabilities Script Buy Now : http://www.pigyardgallery.com/howtobuy.php author: ZoRLu home: www.yildirimordulari.org contact: [email protected] not: msn i ekleyipte aptal aptal konusmayn yok ben seni eklemedim sen beni...

pigyard art Gallery - Multiple Vulnerabilities

pigyard art Gallery - Multiple Vulnerabilities Pigyard Art Gallery Multiple Remote Vulnerabilities Script Buy Now : http://www.pigyardgallery.com/howtobuy.php author: ZoRLu home: www.yildirimordulari.org contact: [email protected] not: msn i ekleyipte aptal aptal konusmayýn yok ben seni...

CVE-2007-1431

Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service crash related to the 1 speak and 2 buy functions...

CVE-2007-1431

Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service crash related to the 1 speak and 2 buy functions...

CVE-2007-1431: Undefined Security Weakness

Multiple unspecified vulnerabilities in PennMUSH 1.8.3 before 1.8.3p1 and 1.8.2 before 1.8.2p3 allow attackers to cause a denial of service crash related to the 1 speak and 2 buy functions...

Clever_Copy_V3_sql.txt

Clever Copy SQL injection vulnerable code in mailarticle.php 11-12 ... $getnews="SELECT from CCnews where entryid='$ID'"; $getnews2=mysqlquery$getnews or die"Could not get blog"; ... "ID" var is not properly sanitized before to be used in a SQL query, poc:...

bestbuy.txt

Title: URL Parsing and Plain Text Password disclosure in Best Buy Employee Toolkit Software Provided by: cm cmthemcatyahoo.com ---------------- Best Buy Employee Toolkit Interactive is a software program used nationally by Best Buy Terminal Systems. The software allows employees the ability to...