894 matches found
SA-CONTRIB-2013-076 - jQuery Countdown - Cross Site Scripting (XSS)
This jQuery Countdown Module enables you to display a countdown block based upon date settings. The jQuery Countdown Module does not properly sanitize the settings, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS vulnerability. This vulnerability ...
"Reboot" - Upcoming latest Hacker Movie you should watch !
"Reboot" - Upcoming latest Hacker Movie you should watch Rosa Entertainment and Jan-Ken-Po Pictures just announced that their cyberpunk thriller short film "Reboot" will launch with a Sneak Preview at DEFCON. Written and Directed by Joe Kawasaki, and Produced by Sidney Sherman, the film stars a...
Unrestricted file upload
Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...
CVE-2008-6492
Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...
CVE-2008-6492
CVE-2008-6492 describes an unrestricted file upload in process.php for the product “Tizag Countdown Creator 3.” An attacker can upload a file with an executable extension via index.php and then access the uploaded file in the pics/ directory to achieve remote code execution. Details note that som...
CVE-2008-6492
Unrestricted file upload vulnerability in process.php in Tizag Countdown Creator 3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via index.php, then accessing the uploaded file via a direct request to the file in pics/. NOTE: some of these...
Tizag Countdown Creator .v.3 Insecure Upload Vulnerability
Exploit for unknown platform in category web applications ========================================================== Tizag Countdown Creator .v.3 Insecure Upload Vulnerability ========================================================== remote file upload script: tizag-countdownVersion3 download...
Tizag Countdown Creator .v.3 Insecure Upload Vulnerability
No description provided by source. remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected]...
Tizag Countdown Creator 3 - Insecure Upload
Tizag Countdown Creator 3 - Insecure Upload remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail:...
Tizag Countdown Creator 3 - Insecure Upload
remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...
Sql injection
SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...
CVE-2008-0789
SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the years parameter...
CVE-2008-0789
CVE-2008-0789 concerns the LI-Scripts LI-Countdown (countdown.php) SQL injection vulnerability, exploitable via the years parameter. The issue enables remote arbitrary SQL execution with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with no authentication. Impact is reported as Par...