2217 matches found
XSS in user links
A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...
XSS in user links
A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...
Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...
Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...
AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities
Exploit for unknown platform in category web applications ==================================================== AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities ==================================================== AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected:...
PhotoVideoTube 1.11 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =================================================== PhotoVideoTube 1.11 Multiple Remote Vulnerabilities =================================================== / | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team...
PHP Article Publisher Arbitrary Auth Bypass Vulnerability
No description provided by source. -------------------------------------------------------------- PHP Article Publisher Arbitrary Auth Bypass Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N download...
PHP Article Publisher Authentication Bypass
-------------------------------------------------------------- PHP Article Publisher Arbitrary Auth Bypass Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N download from:http://www.graugon.com/publisher/download.html Thank You Very Much ahmadbady...
PHP Article Publisher - Arbitrary Authentication Bypass
-------------------------------------------------------------- PHP Article Publisher Arbitrary Auth Bypass Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N download from:http://www.graugon.com/publisher/download.html Thank You Very Much ahmadbady...
PHP Article Publisher - Arbitrary Authentication Bypass
PHP Article Publisher - Arbitrary Authentication Bypass -------------------------------------------------------------- PHP Article Publisher Arbitrary Auth Bypass Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N download...
PHP Article Publisher Arbitrary Auth Bypass Vulnerability
Exploit for unknown platform in category web applications ========================================================= PHP Article Publisher Arbitrary Auth Bypass Vulnerability ========================================================= -------------------------------------------------------------- PH...
Password Protector SD 1.3.1 Insecure Cookie Handling Vulnerability
No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability + Found by :...
Password Protector SD 1.3.1 - Insecure Cookie Handling
======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling Vulnerability + Found by : Mr.tro0oqy + C0ntact :...
Password Protector SD 1.3.1 - Insecure Cookie Handling
Password Protector SD 1.3.1 - Insecure Cookie Handling ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling...
VerliHub Control Panel 1.7e Cross Site Scripting
VerliHub Control Panel - v 1.7e XSS & Iframe Injection Vulnerability http://vhcp.verlihub-project.org -6-05-2009 -Methodman - http://nemesis.te-home.net -Example:- Cross-site scripting vulnerability on login page http://vhcp.com/index.php?page=login&nick="alert"Vulnerable";...
Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities
Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34856/info Verlihub Control Panel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...
Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/34856/info Verlihub Control Panel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
MyBB 1.4.5 Cross Site Scripting
Advisory : Cross-Site Scripting vulnerability in MyBB Application: MyBB Vulnerable Versions: alert'xss' http://yourdomain.com/somefile.png must be a valid link to an image file meeting the board settings for avatars. Discussion The XSS renders in all browsers and on various pages inside the myB...
New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection
source: https://www.securityfocus.com/bid/34680/info New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...
Studio Lounge Address Book 2.5 - Authentication Bypass
Studio Lounge Address Book 2.5 - Authentication Bypass ----------------------------بسم الله الرØمن الرØيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home:...