367 matches found
CVE-2009-2588
Multiple cross-site scripting XSS vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...
CVE-2009-2588: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...
Rapidsendit Clone Script - 'admin.php' Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access t...
Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass
Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authenticatio...
CVE-2008-6162: Improper Authentication
Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1 and the usNick cookie to admin...
Bux.to Clone Script - Insecure Cookie Handling
Bux.to Clone script Insecure Cookie Handling Vulnerability + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex + Download : http://depositfiles.com/files/6633532 + Dork : c SriptBux 2008 | Powered By ScriptBux...
Getacoder clone (sb_protype) Remote SQL Injection Vulnerability
No description provided by source. || | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...
getacoder-sql.txt
|| | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...
YouTube Clone Script (spages.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...
youtubeclone-exec.txt
!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...
YouTube Clone Script - spages.php Remote Code Execution
YouTube Clone Script - spages.php Remote Code Execution !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...
YouTube Clone Script (spages.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =============================================================== YouTube Clone Script spages.php Remote Code Execution Exploit =============================================================== !/usr/bin/perl inphex /siteadmin/spages.php...
YouTube Clone Script - 'spages.php' Remote Code Execution
!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...
CVE-2008-0687
Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...
CVE-2008-0687
CVE-2008-0687 affects the Youtube Clone Script. Affected component: siteadmin/editor_files/includes/load_message.php. Vulnerability: cross-site scripting (XSS) via the lang[please_wait] parameter, enabling remote attackers to inject arbitrary web script or HTML. Impact stated: partial confidentia...
CVE-2008-0687
Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...
CVE-2008-0687: Improper Control of Generation of Code
Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...
youtubeclone-xss.txt
Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...
