UBlog Remote XSS Exploit

Vunerabilitys: ---------------- XSS Exploit Product: -------- UBlog 1.6 Access Edition Vendor: -------- http://www.uapplication.com/ublog/index.asp Description of product: ----------------------- Blog archive by date; Possibility to comment a blog; Notify via email; Password protected; Amend or...

UBlog Remote XSS Exploit

------------------------------------------------------------------ - UBlog Remote XSS Exploit - -= http://colander.altervista.org/advisory/UBlog.txt =- ------------------------------------------------------------------ -= UBlog 1.6 =- Omnipresent May 04, 2006 Vunerabilitys: ---------------- XSS...

Cute Guestbook Remote XSS Exploit

------------------------------------------------------------------ - Cute Guestbook Remote XSS Exploit - -= http://colander.altervista.org/advisory/CuteGuestbook.txt =- ------------------------------------------------------------------ -= Cute Guestbook =- Omnipresent May 04, 2006 Vunerabilitys:...

[Full-disclosure] Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability.

--Security Report-- Advisory: Clansys = 1.1 PHP Code Insertion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 23/04/06 21:07 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Clansys http://www.clansys.de.vu/ Versio...

[Full-disclosure] vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability.

--Security Report-- Advisory: vBulletin = 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 22:36 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MKPortal...

[Full-disclosure] Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities.

--Security Report-- Advisory: CoreNews = 2.0.1 Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 21:43 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: CoreNews http://www.coreslawn.de/...

EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.

--Security Report-- Advisory: EzASPSite = 2.0 RC3 Remote SQL Injection Exploit Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 29/03/06 21:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: EzASPSite...

EzASPSiteSQL.txt

--Security Report-- Advisory: EzASPSite http://victim/EZASPDir/Default.asp?Scheme=SQL EXAMPLE - http://victim/EZASPDir/Default.asp?Scheme=-1+UNION+SELECT+0,0,0,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,...

Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.

--Security Report-- Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 07/03/06 04:52 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Jiros http://www.jiros.net...