CS-Cart 1.3.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28333/info CS-Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

CVE-2008-0733 describes an SQL injection vulnerability in index.php of CS Team Counter Strike Portals, where the id parameter on the downloads page allows remote attackers to execute arbitrary SQL commands. The issue is caused by unsanitized input reaching a database query, enabling partial/ unau...

CVE-2008-0733: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2007-5582

CiscoWorks Server/XSS in the Common Services login page (CS) affects CS 3.0.x and 3.1, possibly earlier 2.6, allowing remote injection of arbitrary script or HTML via unspecified vectors. The vulnerability is documented as a cross-site scripting issue in the login page; the provided sources do no...

CVE-2007-5582: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login page in Cisco CiscoWorks Server CS, possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at eqdkp.lod-cs-clan.de

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting eqdkp.lod-cs-clan.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

CVE-2007-5932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

Code injection

The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service telephony application outage...

CVE-2007-5591: Undefined Security Weakness

The CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise VoIP-Core-CS 1000E and 1000S, Meridian-Core-Option 11C Chassis and Cabinet, and Meridian-Core-Option 51C, 61C, and 81C allows remote attackers to cause a denial of service telephony application outage...

Improper access control

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-4937

CVE-2007-4937 affects CS Guestbook. The vulnerability arises from insufficient access control that allows remote attackers to retrieve sensitive data (admin name and MD5 password hash) by directly requesting base/usr/0.php. The description in connected sources confirms the issue but does not prov...

CVE-2007-4937: Undefined Security Weakness

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-3731

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs the xcs field during ptrace single-step operations, which allows local users to cause a denial of service NULL dereference and OOPS via certain code that makes ptrace PTRACESETREGS and...

CS Guestbook Admin Name & Md5 Security Vuln

By Cr@zyKing http://ayyildiz.org Ayyildiz Team nternationel Force Cs Guestbook admin name & admin hass md5 vuln. http://xxx.com/base/usr/0.php admin name & md5 http://xxx.com/mod.php - go to admin panel Md5 Cracking : gdataonline.com & milw0rm.com Greatz : Eno7 , TamTurk , Metlak , Blackwolf ,...

CS-Guestbook 0.1 - Login Credentials Information Disclosure

CS-Guestbook 0.1 - Login Credentials Information Disclosure source: https://www.securityfocus.com/bid/25652/info CS-Guestbook is prone to an information-disclosure vulnerability because the application fails to properly protect sensitive information. An attacker can exploit this issue to access...