CVE-2009-2424

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2009-2424

CVE-2009-2424 affects Ebay Clone 2009 where the XSS vulnerability is caused by an injection in the search.php mode parameter. The impact is the ability to execute arbitrary script/HTML in the victim’s browser. Public references confirm the issue, and an exploit is listed by Exploit DB (per CIRCL ...

Ebay Clone 2009 (XSS/bSQL) Multiple Remote Vulnerabilities

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Ebay Clone 2009 (XSS/bSQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Ebay Clone 2009 XSS/bSQL Multiple Remote Vulnerabilities ==========================================================...

ebay clone 2009 - Cross-Site Scripting / Blind SQL Injection

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Rapidsendit Clone Script - 'admin.php' Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access t...

Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass

Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authenticatio...

Rapidsendit Clone 2.1 Insecure Cookie

====================================================================================== o Rapidsendit Clone 2.1 Insecure Cookie Handling Vulnerability Software : Rapidsendit Clone version 2.1 Vendor : http://www.rapidsendit.com/ Demo : http://www.rapidsendit.com/script/demo.html Author : NoGe...

Ebay Clone 2009 XSS / SQL Injection

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Alibaba-clone CMS Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Alibaba-clone CMS Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz, Sheiry, Shimik Root aka Str0ze...

CVE-2009-1767

admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify arbitrary accounts via the 1 loginname, 2 password, 3 email, 4 firstname, or 5 lastname parameter...

CVE-2009-1767

CVE-2009-1767 involves admin/edituser.php in the 2daybiz Template Monster Clone, where no administrative authentication is required. This permits remote attackers to modify arbitrary accounts via the parameters loginname, password, email, firstname, and lastname. The NVD lists a CVSSv2 base score...

2daybiz Template Monster Clone (edituser.php) Change Pass Exploit

Exploit for unknown platform in category web applications ================================================================= 2daybiz Template Monster Clone edituser.php Change Pass Exploit ================================================================= Template Monster Clone Change Password...

2daybiz Template Monster Clone (edituser.php) Change Pass Exploit

No description provided by source. title Template Monster Clone Change Password /title /head head /head body bgcolor="000000" pfont size="6" color="FF0000"a href="http://www.2daybiz.com/" font color="FF0000"2daybiz/font/a Template Monster Clone /font/p TABLE border=0 width=780 align=center TR...

2DayBiz Template Monster Clone - 'edituser.php' Change Pass

Template Monster Clone Change Password 2daybiz Template Monster Clone Add Categoty Add Templates Edit Templates Show Templates -- &nbsp Login Namee Password input type =text class=inputstyle...

2DayBiz Template Monster Clone - edituser.php Change Pass

2DayBiz Template Monster Clone - edituser.php Change Pass Template Monster Clone Change Password 2daybiz Template Monster Clone Add Categoty Add Templates Edit Templates Show Templates -- &nbsp Login Namee Pa...

[SECURITY] [DSA 1791-1] New moin packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1791-1 [email protected] http://www.debian.org/security/ Steffen Joeris May 06, 2009 http://www.debian.org/security/faq -...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

Unrestricted file upload

Unrestricted file upload vulnerability in index.php in the Twitter Clone TClone plugin for ReVou Micro Blogging allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in settings/myphoto...