Creative Software UK Community Portal 1.1 - 'ArticleView.php?article_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Creative Software UK Community Portal 1.1 - 'DiscView.php?forum_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

invisionCBSQL.txt

LEFT Invision Community Blog .. Bugs SQL Injection :- Filename :- mod.php Function name :- dommod The $ids Unfilter Input By Intval As Array : So We Can Do SQL Injection -- Arabic /LEFT RIGHT ÇáãÊÛíÑ $ids ÛíÑ ãÝáÊÑ Úä ØÑíÞ ÇáÏÇáå intval æåæ ÈÔßá ãÕÝæÝå .. áåÐÇ ÇáÓÈÈ ããßä Úãá ÷ÍÞäå /RIGHT LEFT php...

ASP-Nuke-community-v1.4SP2.txt

I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP2 and possibly other versions. Shouts to z3r0, neX, uid0 exploitercode.com, Zodiac, Wicked, and all the other I may have forgot.. Once again..g00ns.net fucking owns j00! XSS in /articles.asp...

ASP-Nuke-community-v1.4SP3.txt

I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP3 and possibly other versions. Shouts go to all the g00ns. Once again..g00ns.net fucking owns j00! Found in XSS /aspnuke/default.asp?poll='alertdocument.cookie;&results=1 ----------...

CVE-2006-2003

Cross-site scripting XSS vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed by fsguestbook.html. NOTE: the provenance of this information is unknown; the details are obtained...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed by fsguestbook.html. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-2003

The CVE-2006-2003 entry concerns a cross-site scripting (XSS) vulnerability in the Community Architect Guestbook, specifically in the cgi-bin/guest component. The issue allows remote attackers to inject arbitrary script/HTML when signing the guestbook, with the malicious content subsequently rend...

CVE-2006-2003

Cross-site scripting XSS vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed by fsguestbook.html. NOTE: the provenance of this information is unknown; the details are obtained...

XSS Vulnerability in Guest-book script powered by Community Architect

This document is best seen with Font: Verdana Size: 9pt Advisory Name =========== XSS Vulnerability in Guest-book script powered by Community Architect Vulnerable Systems ============== Sites providing web-hosting service powered by Community Architect. Found By ======= Susam Pal Found On =======...

Mozilla Firefox 1.5.0.1 Camino 1.0 - Null Pointer Dereference Crash

Mozilla Firefox 1.5.0.1 Camino 1.0 - Null Pointer Dereference Crash http://www.sysdream.com - Reported Camino Browser issue. Thomas Waldegger BuHa-Security Community - http://buha.info/board/ If you have questions, suggestions or criticism about the advisory feel free to send me a mail. The addre...

IDS evasion techniques and countermeasures detailed description-vulnerability warning-the black bar safety net

In the network thriving for a few days, the network security issues become increasingly prominent. Network on the Black, White two in the network security of the various fields are engaged in a fierce competition. The black hat community and constantly launch Dodge or across the networkintrusion...

Community Link Pro webeditor login.cgi remote command execution

The remote host is running Community Link Pro, a web-based application written in Perl. The remote version of this software contains a flaw in the script 'login.cgi' which may allow an attacker to execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id:...

PluggedOut Nexus SQL injection

PluggedOut Nexus SQL injection Nexus is an open source script you can run on your web server to give you a community based website where people can register, search each others interests, and communicate with one another either through a private messaging system, or via chat requests and forums...

PHPKIT >= 1.6.1r2 arbitrary local/remote inclusion (unproperly patched in previous versions)

---------- PHPKit = v.1.6.1 release 2 remote code execution ------------------- software: site: www.phpkit.de description: a Content Management / homepage / community building software written in PHP language --------------------------------------------------------------------------------...

BuHa-7.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 7 | Feb 14th, 2006 | --------------------------------------------------- | Vendor | Mantis BT | | URL | http://www.mantisbt.org/ | | Version | /manageuserpage.php: GET:...

[BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4

-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 --------------------------------------------------- | BuHa Security-Advisory 7 | Feb 14th, 2006 | --------------------------------------------------- | Vendor | Mantis BT | | URL | http://www.mantisbt.org/ | | Version | = Mantis 1.00rc4 | | Risk ...

Siteframe Beaumont 5.0.1a <== Cross-Site Scripting Vulnerability

Hi, I'm Kiki and I would signal you a XSS in the CMS Siteframe Beaumont 5.0.1a I enclose the advisory and the origina is here: http://kiki91.altervista.org/exploit/siteframe5.0.1axss.txt Bye bye Kiki p.s: sorry for my bad English but I'm Italian ; Advisory: Siteframe Beaumont 5.0.1a == Cross-Site...

CVE-2006-0535

Multiple cross-site scripting XSS vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contain any actionable or distinguishing information. Perhaps it should not be included in CVE. NOTE: the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contain any actionable or distinguishing information. Perhaps it should not be included in CVE. NOTE: the...