Unfixed XSS vulnerability at nostalji.org

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting nostalji.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currently...

Unfixed XSS vulnerability at gamerclan.org

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting gamerclan.org, which at the time of submission ranked 1420644 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currentl...

Unfixed XSS vulnerability at 1numara.net

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting 1numara.net, which at the time of submission ranked 1549731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currently...

Unfixed XSS vulnerability at interofis.com

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting interofis.com, which at the time of submission ranked 8377955 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currentl...

Unfixed XSS vulnerability at fankulubu.net

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting fankulubu.net, which at the time of submission ranked 282162 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently...

Unfixed XSS vulnerability at liste.org

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting liste.org, which at the time of submission ranked 4273316 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently...

Unfixed XSS vulnerability at talebe.net

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting talebe.net, which at the time of submission ranked 2216900 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currently...

Unfixed XSS vulnerability at interofis.net

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting interofis.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently...

Unfixed XSS vulnerability at camekan.com

Security researcher St@rExT, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting camekan.com, which at the time of submission ranked 1195818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currently...

Unfixed XSS vulnerability at www.forumup.org

Security researcher St@rExT, has submitted on 25/05/2007 a cross-site-scripting XSS vulnerability affecting www.forumup.org, which at the time of submission ranked 12427 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/05/2007. It is currentl...

Unfixed XSS vulnerability at forumup.it

Security researcher Scr34M, has submitted on 25/05/2007 a cross-site-scripting XSS vulnerability affecting forumup.it, which at the time of submission ranked 6446 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2007. It is currently...

CVE-2006-7034

CVE-2006-7034 corresponds to an SQL injection in the Super Link Exchange Script 1.0, specifically via the cat parameter in directory.php. The underlying flaw is unsanitized user input in the SQL query construction, enabling remote attackers to execute arbitrary SQL commands. The CVSS v2 base scor...

Unfixed XSS vulnerability at www.agd.com.au

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.agd.com.au, which at the time of submission ranked 697250 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...

asianxoXSS.txt

AsianXO.com Homepage: http://www.asianxo.com/ Effected files: directory.php profiles.php Input boxes of editing profile ---------------------------- XSS Vulnerability via dirid: Directory.php PoC: http://www.axo2.com/directory.php?dirid=1" inaurl injection along with tags, which also reveals some...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...

CVE-2002-0434

Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter...

CVE-2002-0434

The CVE-2002-0434 issue centers on the directory.php script by Marcus S. Xenakis, which allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter. Connected sources (OpenVAS NASL and Tenable plugin) confirm a remote command-execution vulnerability in the ...

CVE-2002-0434

Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter...

Marcus Xenakis directory.php Execute Arbitrary Commands

The 'directory.php' file is installed. 1. This tool allows anybody to read any directory. 2. It is possible to execute arbitrary code with the rights of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

Marcus S. Xenakis "directory.php" allows arbitrary code execution

------------------------------------------------------------ itcp advisory 3 [email protected] http://www.it-checkpoint.net/advisory/3.html March 10th, 2002 ------------------------------------------------------------ Marcus S. Xenakis "directory.php" allows arbitrary code execution...