Lucene search
K

3087 matches found

Cvelist
Cvelist
added 2008/02/12 12:0 a.m.13 views

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...

5.7AI score0.0057EPSS
Exploits0References4
CVE
CVE
added 2008/02/12 12:0 a.m.38 views

CVE-2008-0687

CVE-2008-0687 affects the Youtube Clone Script. Affected component: siteadmin/editor_files/includes/load_message.php. Vulnerability: cross-site scripting (XSS) via the lang[please_wait] parameter, enabling remote attackers to inject arbitrary web script or HTML. Impact stated: partial confidentia...

7.5CVSS5.7AI score0.0057EPSS
Exploits0References4Affected Software1
exploitpack
exploitpack
added 2008/02/04 12:0 a.m.12 views

HispaH YouTube Clone - load_message.php Cross-Site Scripting

HispaH YouTube Clone - loadmessage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2008/02/04 12:0 a.m.20 views

HispaH YouTube Clone - 'load_message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the context of an unsuspecting...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2008/02/03 12:0 a.m.27 views

youtubeclone-xss.txt

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2008/02/03 12:0 a.m.40 views

Youtube Clone Xross Site Scripting (load_message.php)

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: ?php echo $lang'pleasewait'; ? Ex:...

0.2AI score
Exploits0
NVD
NVD
added 2007/12/31 8:46 p.m.8 views

CVE-2007-6603

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via ...

5CVSS6.8AI score0.06015EPSS
Exploits0References4
CVE
CVE
added 2007/12/31 8:0 p.m.53 views

CVE-2007-6603

CVE-2007-6603 affects Hot or Not Clone. The issue is insufficient access control for producing/reading database backups: an attacker can trigger control/backup/backup.php to generate a backup.sql and then download it via control/downloadfile.php, exposing administrator credentials. The NVD entry ...

5CVSS6.8AI score0.06015EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2007/12/31 8:0 p.m.17 views

CVE-2007-6603

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via ...

6.8AI score0.06015EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2007/12/29 12:0 a.m.24 views

hotornot-backup.txt

Name : Hot or Not Clone by Jnshosts.com Dump backup And See Password Admin Download From : http://www.jnshosts.com/downloads/hot-or-not-clone-script/index.php Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Copyright @ 2007 Powered By Hot or Not Clone by Jnshosts.com Rate My Pic ::...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2007/11/26 12:0 a.m.25 views

hotscripts-sql.txt

--==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK google:...

7.4AI score
Exploits0
Prion
Prion
added 2007/11/22 12:46 a.m.9 views

Sql injection

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00462EPSS
Exploits0References3
NVD
NVD
added 2007/11/22 12:46 a.m.5 views

CVE-2007-6084

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00462EPSS
Exploits0References3
Cvelist
Cvelist
added 2007/11/22 12:0 a.m.14 views

CVE-2007-6084

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00462EPSS
Exploits0References3
CVE
CVE
added 2007/11/22 12:0 a.m.43 views

CVE-2007-6084

CVE-2007-6084 describes an SQL injection vulnerability in the HotScripts Clone Script, specifically in the file software-description.php. The issue allows remote attackers to inject arbitrary SQL via the id parameter, leading to potential data exposure or modification. The connected documents con...

7.5CVSS8.4AI score0.00462EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2007/11/20 8:46 p.m.8 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

6.8CVSS7.5AI score0.07457EPSS
Exploits0References7
Cvelist
Cvelist
added 2007/11/20 8:0 p.m.13 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

7.5AI score0.07457EPSS
Exploits0References7
seebug.org
seebug.org
added 2007/11/18 12:0 a.m.13 views

HotScripts Clone Script Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz ...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2007/11/18 12:0 a.m.52 views

Myspace Clone Script (index.php) Remote File Inclusion Vulnerability

|S n I p E r - S A . C o m| SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR RR S NN NN NN II PP P EE RR R SS NN NN NN II PPPPPPP EE RR RR SSSS NN NN NN II PPP EEEEEEE RRRR SS NN NN NN II PP EE RRRR S NN NN NN II PP EE RR RR SS NN NNN II PP EE RR RR SSSSS NN NNN II PP EEEEEEEEEE ...

Exploits0
0day.today
0day.today
added 2007/11/18 12:0 a.m.21 views

HotScripts Clone Script Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== HotScripts Clone Script Remote SQL Injection Vulnerability ==========================================================...

7.1AI score
Exploits0
Rows per page
Query Builder