Lucene search
+L

4171 matches found

exploitpack
exploitpack
•added 2008/02/04 12:00 a.m.•23 views

HispaH YouTube Clone - load_message.php Cross-Site Scripting

HispaH YouTube Clone - loadmessage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/02/04 12:00 a.m.•27 views

HispaH YouTube Clone - 'load_message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the context of an unsuspecting...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/02/03 12:00 a.m.•37 views

youtubeclone-xss.txt

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2008/02/03 12:00 a.m.•57 views

Youtube Clone Xross Site Scripting (load_message.php)

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: ?php echo $lang'pleasewait'; ? Ex:...

0.2AI score
SaveExploits0
NVD
NVD
•added 2007/12/31 8:46 p.m.•26 views

CVE-2007-6603

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via ...

5CVSS6.8AI score0.02857EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2007/12/31 8:00 p.m.•40 views

CVE-2007-6603

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via ...

6.8AI score0.02857EPSS
SaveExploits1References4
CVE
CVE
•added 2007/12/31 8:00 p.m.•72 views

CVE-2007-6603

CVE-2007-6603 affects Hot or Not Clone. The issue is insufficient access control for producing/reading database backups: an attacker can trigger control/backup/backup.php to generate a backup.sql and then download it via control/downloadfile.php, exposing administrator credentials. The NVD entry ...

5CVSS5.8AI score0.02857EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/31 12:00 a.m.•7 views

CVE-2007-6603: Undefined Security Weakness

Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via ...

5CVSS5.8AI score0.02857EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2007/12/29 12:00 a.m.•36 views

hotornot-backup.txt

Name : Hot or Not Clone by Jnshosts.com Dump backup And See Password Admin Download From : http://www.jnshosts.com/downloads/hot-or-not-clone-script/index.php Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Copyright @ 2007 Powered By Hot or Not Clone by Jnshosts.com Rate My Pic ::...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/11/26 12:00 a.m.•37 views

hotscripts-sql.txt

--==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK google:...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/11/22 12:46 a.m.•24 views

Sql injection

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01006EPSS
SaveExploits1References3
NVD
NVD
•added 2007/11/22 12:46 a.m.•22 views

CVE-2007-6084

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2007/11/22 12:00 a.m.•38 views

CVE-2007-6084

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01006EPSS
SaveExploits1References3
CVE
CVE
•added 2007/11/22 12:00 a.m.•60 views

CVE-2007-6084

CVE-2007-6084 describes an SQL injection vulnerability in the HotScripts Clone Script, specifically in the file software-description.php. The issue allows remote attackers to inject arbitrary SQL via the id parameter, leading to potential data exposure or modification. The connected documents con...

7.5CVSS8.4AI score0.01006EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/22 12:00 a.m.•3 views

CVE-2007-6084: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01006EPSS
SaveExploits1References2
NVD
NVD
•added 2007/11/20 8:46 p.m.•28 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

6.8CVSS7.5AI score0.05785EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2007/11/20 8:00 p.m.•47 views

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

7.5AI score0.05785EPSS
SaveExploits1References7
zdt
zdt
•added 2007/11/18 12:00 a.m.•33 views

HotScripts Clone Script Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== HotScripts Clone Script Remote SQL Injection Vulnerability ==========================================================...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/11/18 12:00 a.m.•21 views

HotScripts Clone Script Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz ...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/11/18 12:00 a.m.•23 views

HotScripts Clone Script - SQL Injection

HotScripts Clone Script - SQL Injection --==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

0.4AI score
SaveExploits0
Rows per page
Query Builder