Cross site scripting

Cross-site scripting XSS vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

Design/Logic Flaw

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set...

CVE-2007-1479

Cross-site scripting XSS vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2007-1480

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set...

CVE-2007-1479

The CVE-2007-1479 entry details a Cross-site Scripting (XSS) vulnerability in Guestbook.php of Creative Guestbook 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, potentially enabling client-side script execution in affected users’ browse...

CVE-2007-1480

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set...

CVE-2007-1480

CVE-2007-1480 affects Creative Guestbook 1.0. An unauthenticated remote attacker can issue a direct request to createadmin.php with Name, Email, and PASSWORD parameters to create an administrative account. This is the underlying vulnerability described in multiple sources, including the NVD entry...

Creative Files 1.2 - 'kommentare.php' SQL Injection

======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

Creative Files 1.2 (kommentare.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerability ======================================================================...

CVE-2007-1479: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2007-1480: Improper Authentication

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set...

Creative Files 1.2 - kommentare.php SQL Injection

Creative Files 1.2 - kommentare.php SQL Injection ======================X=O=R=O=N===================== + + Creative Files 1.2 kommentare.php Remote SQL Injection Vulnerabilities + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

creative Guestbook 1.0 - Multiple Vulnerabilities

.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : Creative Guestbook 1.0 Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php Author : Dj7xpl | [email protected] Dork : "Creative Guestbook" Class : Add...

creative Guestbook 1.0 - Multiple Vulnerabilities

creative Guestbook 1.0 - Multiple Vulnerabilities .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : Creative Guestbook 1.0 Download : http://www.thecreativeheads.de/CreativeFiles/downloads.php Author : Dj7xpl |...

Creative Guestbook 1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== Creative Guestbook 1.0 Multiple Remote Vulnerabilities ====================================================== .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^...

CVE-2006-4778

SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some details are obtained from third party information...

CVE-2006-4778

CVE-2006-4778 affects Creative Commons Tools ccHost before 3.0. The vulnerability is an SQL injection in the URL used to populate the file ID, allowing remote attackers to execute arbitrary SQL commands. The issue is documented in NVD/NIST records (and CVE lists) with a base score of 7.5 (HIGH) u...

CVE-2006-4778: Undefined Security Weakness

SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some details are obtained from third party information...

[MajorSecurity #6]Socketmail <= 2.2.6 - Remote File Include Vulnerability

MajorSecuritySocketmail = 2.2.6 - Remote File Include Vulnerability -------------------------------------------------------- Software: Socketmail Version: =2.2.6 Type: Remote File Include Vulnerability Date: May, 25th 2006 Vendor: Creative Digital Resources Page: http://socketmail.com Risc: High...

Socketmail 2.2.6 - 'site_path' Remote File Inclusion

Title: Socketmail = 2.2.6 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: Creative Digital Resources URL: http://socketmail.com ----------------------------------------------------------------- Credits: Discovered by: 'Aesthetico'...