CVE-2008-5669: Improper Input Validation

index.php in the comments preview section in Textpattern aka Txp CMS 4.0.5 allows remote attackers to cause a denial of service via a long message parameter...

Image properties can be used to execute scripts

Image properties can contain custom comments. When displaying the image properties, Opera can be tricked into treating the comments as script. This can cause the script to be run in the wrong security context...

the net guys aspired2blog - SQL Injection / File Disclosure

--------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD: http://site.com/Path/admin/blog.mdb SQ...

Star Articles 6.0 - Blind SQL Injection (1)

Star Articles 6.0 - Blind SQL Injection 1 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + stararticles blind sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

Design/Logic Flaw

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

Copyright Information Within HTML Comments

Binary data 4709.prm...

CVE-2008-4424

Cross-site scripting XSS vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-4424

Cross-site scripting XSS vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

printlog-disclose.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

postcomments-cookie.txt

Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman Aleminin Ramazan Bayrami Kutlu Olsun...

Post Comments 3.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== Post Comments 3.0 Insecure Cookie Handling Vulnerability ======================================================== Post Comments v3.0 Insecure Cookie Handling Vulnerability By...

Post Comments 3.0 Insecure Cookie Handling Vulnerability

No description provided by source. Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman Aleminin...

PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass

PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass source: https://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker...

Post Comments 3.0 - Insecure Cookie Handling

Post Comments 3.0 - Insecure Cookie Handling Post Comments v3.0 Insecure Cookie Handling Vulnerability By CrackersChild Demo : http://www.phpjabbers.com/post-comment/try/admin.php Vendor : by phpjabbers.com Exploit : javascript:document.cookie = "PostCommentsAdmin=logged; path=/"; Tum Musluman...

PHPJabbers Post Comments 3.0 - Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gain administrative access...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

ZeeReviews - SQL Injection

ZeeReviews - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability ZeeReviews comments.php ItemID http://www.zeescripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...