vBulletin 4.0.8 PL1 - Cross-Site Scripting Filter Bypass within Profile Customization

vBulletin 4.0.8 PL1 - Cross-Site Scripting Filter Bypass within Profile Customization Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: "Powered by vBulletin Version 4.0.8" -"vBulletin.com is now powered by" Date: 20th November 2010 Author: MaXe...

vBulletin 4.0.8 PL1 - Cross-Site Scripting Filter Bypass within Profile Customization

Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: "Powered by vBulletin Version 4.0.8" -"vBulletin.com is now powered by" Date: 20th November 2010 Author: MaXe Software Link: Commercial software. Version: 4.0.8 PL1 Screenshot: See attachment. Tested...

vBulletin 4.0.8 - Persistent XSS via Profile Customization

vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money...

vBulletin 4.0.8 - Persistent XSS via Profile Customization

No description provided by source. Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization Body: vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has i...

vBulletin Profile Customization功能HTML注入漏洞

BUGTRAQ ID: 44873 vBulletin是一款开放源代码的PHP论坛程序。 vBulletin的Profile Customization功能中存在持续性跨站脚本漏洞。在配置文件的自定义字段，可以输入颜色代码、rgb代码和图形。由于url函数没有正确的过滤用户输入，导致vBulletin受跨站脚本攻击的影响。 VBulletin 4.0.8 厂商补丁： VBulletin --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vbulletin.com/ url/scriptimg...

vBulletin 4.0.8 - Persistent XSS via Profile Customization

Exploit for php platform in category web applications ========================================================== vBulletin 4.0.8 - Persistent XSS via Profile Customization ========================================================== Body: vBulletin - Persistent Cross Site Scripting via Profile...

vBulletin 4.0.8 - Persistent Cross-Site Scripting via Profile Customization

vBulletin 4.0.8 - Persistent Cross-Site Scripting via Profile Customization Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization Body: vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing,...

vBulletin 4.0.8 Cross Site Scripting

vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money...

vBulletin 4.0.8 - Persistent Cross-Site Scripting via Profile Customization

Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization Body: vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has it all. Whether it’s available...

[SECURITY] Fedora 12 Update: drupal-cck-6.x.2.8-1.fc12

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-30 X. INDEX I. ABO...

Joomla! Component JE Guestbook 1.0 - Multiple Vulnerabilities

JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-09-30 X. INDEX I. ABO...

Joomla! Component JE Guestbook 1.0 - Multiple Vulnerabilities

Joomla! Component JE Guestbook 1.0 - Multiple Vulnerabilities JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities Name JE Guestbook Vendor http://www.joomlaextensions.co.in Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...

DMXReady Members Area Manager - Persistent Cross-Site Scripting

DMXReady Members Area Manager - Persistent Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXReady Members Area Manager Persistent XSS Vendor url:http://www.dmxready.com/ Version:2 Price:295$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effect...

[R7-0035] VxWorks Authentication Library Weak Password Hashing

R7-0035: VxWorks Authentication Library Weak Password Hashing August 2, 2010 -- Vulnerability Details: This vulnerability allows remote attackers to bypass the authentication process for the Telnet and FTP services of the VxWorks operating system. This flaw occurs due to an insecure password...

Fedora 13 : kvirc-4.0.0-1.fc13 (2010-10522)

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem,...

2daybiz Online Classified System SQL Injection / Cross Site Scripting

=========================================================== 2daybiz online classified system SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

2daybiz Network Community Script SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications ================================================================== 2daybiz Network Community Script SQL Injection / XSS Vulnerability ==================================================================...

Real-time ASP Calendar SQL Vulnerability

Exploit for asp platform in category web applications ======================================== Real-time ASP Calendar SQL Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Site to Store Automobile - Motorcycle Boat SQL Injection

Site to Store Automobile - Motorcycle Boat SQL Injection Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Site to Store Automobile - Motorcycle - Boat SQL Injection...