Jupiter CMS 1.1.4/1.1.5 - modules/register Multiple SQL Injections

source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

CVE-2006-4232

CVE-2006-4232 : A race condition in the grid-proxy-init tool of Globus Toolkit (versions 3.2.x, 4.0.x, 4.1.0 before 20060815) allows local attackers to steal credential data by replacing the proxy credentials file between its creation and the check for exclusive access. The vulnerability arises f...

Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)

Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...

Cross-site scripting vulnerability details-vulnerability warning-the black bar safety net

【Preface】 This paper mainly introduces cross-site scripting vulnerability in the Genesis, form, hazard, use patterns, hidden tips, solutions and frequently asked questions （FAQ）, due to the current introduction to cross-site scripting vulnerability information is not a lot, and also generally not...

PHP Script Tools PSY Auction - email_request.php?user_id Cross-Site Scripting

PHP Script Tools PSY Auction - emailrequest.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failur...

PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17964/info WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation vulnerabilities. These issues are due...

CyberBuild - browse0.htm?ProductIndex Cross-Site Scripting

CyberBuild - browse0.htm?ProductIndex Cross-Site Scripting source: https://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

simplog_092_incl_xpl

!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.simplog.org/ description: "Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is...

SKForum 1.x - 'area.View.action?areaID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17389/info SKForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

pubcookie-login-server -- cross site scripting vulnerability

Nathan Dors of the Pubcookie Project reports: Multiple non-persistent XSS vulnerabilities were found in the Pubcookie login server's compiled binary "index.cgi" CGI program. The CGI program mishandles untrusted data when printing responses to the browser. This makes the program vulnerable to...

A springboard for attack and Defense-bug warning-the black bar safety net

Hackers in the attack will borrow from other systems to their own purposes, such as for the next target of the attack and occupied the computer itself use, and so on. This article describes the common hacker to the usurped computer use and Security Administrator to the appropriate response method...

xoopsXSS.txt

NightWarrior nightwarrior771athotmail.com Xoops Pool Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code:...

GLSA-200512-12 : Mantis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200512-12 Mantis: Multiple vulnerabilities Tobias Klein discovered that Mantis contains several vulnerabilities, including: a file upload vulnerability. an injection vulnerability in filters. a SQL injection vulnerability in the...

Commercial Interactive Media SCOOP! 2.3 - 'requestDemo.asp?Invalid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrar...

eDatCat 3.0 - EDCstore.pl Cross-Site Scripting

source: https://www.securityfocus.com/bid/15889/info eDatCat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

QuickPayPro 3.1 - design.php?delete SQL Injection

QuickPayPro 3.1 - design.php?delete SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...

Milliscript 1.4 Multiple Vulnerabilities

Full PDF Advisory: http://securitynation.com/files/sndown.php?id=22 english http://securitynation.com/files/sndown.php?id=22 spanish Multiple Bugs On MilliScripts 1.4 Redirection http://www.milliscripts.at Date: 01-Diciembre-2005 Researchers: Luis Alberto Cortes Zavala, Vicente Perez 1.-Overview...