TCW PHP Album - Multiple Vulnerabilities

TCW PHP Album - Multiple Vulnerabilities 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor...

CVE-2009-2104

The CVE-2009-2104 entry describes a Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension for TYPO3, affecting version 2.7.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

freePHPgallery 0.6 - Cookie Local File Inclusion

freePHPgallery 0.6 - Cookie Local File Inclusion --==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author:...

freePHPgallery 0.6 - Cookie Local File Inclusion

--==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: freePHPgallery 0.6 Cookie Local Fil...

wpquiz-sql.txt

Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

apnaspace.txt

Apnaspace.com A myspace type site for arab & indian teens Homepage: http://www.http://www.apnaspace.com Effected files: Comment input box: Posting a blog entry: - Entry title - Entry body Viewing a profile Posting a bulletin. Commenting on a picture Sending mail to someone...

CVE-2006-1106

The CVE-2006-1106 issue concerns a Cross-site Scripting (XSS) vulnerability in Pixelpost versions 1.5 beta 1 and earlier. The vulnerability arises in the commenting path, where input fields (message, name, url, email) can be manipulated to inject arbitrary web script/HTML due to insufficient inpu...

CVE-2006-1106

Cross-site scripting XSS vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 message, 2 name, 3 url, and 4 email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure, but...

Fantastic News "category" SQL inj.

Fantastic News "category" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/fantastic-news-category-sql-inj.html Vendor:www.fscripts.com Product link:http://fscripts.com/free.php?id=1 affected version: 2.1.1 and prior Product description:...

PHPNuke76dl.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13 Author: Maksymilian Arciemowicz cXIb8O3 Date: 5.4.2005 from securityreason.com TEAM - --- 0.Description --- PHP-Nuke is a Web Portal System, storytelling software, news system, online...