Lucene search
+L

248 matches found

Packet Storm
Packet Storm
added 2008/11/25 12:0 a.m.24 views

chipmunk-bypassxss.txt

Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: RedHaK Kardesime ozel tesekurler...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/11/25 12:0 a.m.20 views

Chipmunk Topsites (Auth Bypass/XSS) Multiple Remote Vulnerabilities

No description provided by source. Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/11/25 12:0 a.m.15 views

chipmunk topsites - Authentication Bypass Cross-Site Scripting

chipmunk topsites - Authentication Bypass Cross-Site Scripting Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi...

0.4AI score
SaveExploits0
zdt
zdt
added 2008/11/25 12:0 a.m.20 views

Chipmunk Topsites (Auth Bypass/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Chipmunk Topsites Auth Bypass/XSS Multiple Remote Vulnerabilities =================================================================== Chipmunk Topsites Auth Bypass SQL...

7.1AI score
SaveExploits0
NVD
NVD
added 2008/11/04 9:0 p.m.17 views

CVE-2008-4921

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

7.5CVSS7.1AI score0.02569EPSS
SaveExploits0References5
Prion
Prion
added 2008/11/04 9:0 p.m.13 views

Authentication flaw

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

7.5CVSS7.6AI score0.02569EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2008/11/04 8:0 p.m.23 views

CVE-2008-4921

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

7.1AI score0.02569EPSS
SaveExploits0References5
CVE
CVE
added 2008/11/04 8:0 p.m.41 views

CVE-2008-4921

Chipmunk CMS 1.3 contains an authentication bypass vulnerability in the file board/admin/reguser.php that allows remote attackers to gain administrator privileges through a direct/crafted request. The root cause is not explicitly detailed in the provided documents, only that an unauthenticated us...

7.5CVSS7.1AI score0.02569EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2008/07/15 10:41 p.m.15 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

4.3CVSS5.9AI score0.01218EPSS
SaveExploits5References2
NVD
NVD
added 2008/07/15 10:41 p.m.20 views

CVE-2008-3186

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

4.3CVSS5.7AI score0.01218EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2008/07/15 10:0 p.m.24 views

CVE-2008-3186

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

5.7AI score0.01218EPSS
SaveExploits5References2
CVE
CVE
added 2008/07/15 10:0 p.m.59 views

CVE-2008-3186

Chipmunk Blog (Blogger) contains cross-site scripting (XSS) vulnerabilities in the membername parameter of five PHP scripts (members.php, comments.php, photos.php, archive.php, cat.php). Root cause: improper handling of user-supplied membername leads to script/HTML injection. Impact: allows remot...

4.3CVSS5.7AI score0.01218EPSS
SaveExploits5References2Affected Software1
exploitpack
exploitpack
added 2008/06/23 12:0 a.m.15 views

Chipmunk Blog - archive.php Cross-Site Scripting

Chipmunk Blog - archive.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

SaveExploits0
Exploit DB
Exploit DB
added 2008/06/23 12:0 a.m.22 views

Chipmunk Blog - 'members.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

4.3CVSS5.8AI score0.01218EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2008/06/23 12:0 a.m.22 views

Chipmunk Blog - 'photos.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

4.3CVSS5.8AI score0.01218EPSS
SaveExploits5
exploitpack
exploitpack
added 2008/06/23 12:0 a.m.14 views

Chipmunk Blog - photos.php Cross-Site Scripting

Chipmunk Blog - photos.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

SaveExploits0
exploitpack
exploitpack
added 2008/06/23 12:0 a.m.20 views

Chipmunk Blog - comments.php Cross-Site Scripting

Chipmunk Blog - comments.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

SaveExploits0
exploitpack
exploitpack
added 2008/06/23 12:0 a.m.11 views

Chipmunk Blog - cat.php Cross-Site Scripting

Chipmunk Blog - cat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

SaveExploits0
Exploit DB
Exploit DB
added 2008/06/23 12:0 a.m.20 views

Chipmunk Blog - 'cat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

4.3CVSS5.8AI score0.01218EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2008/06/23 12:0 a.m.22 views

Chipmunk Blog - 'comments.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

4.3CVSS5.8AI score0.01218EPSS
SaveExploits5
Rows per page
Query Builder