Feed links can link to local files

As a security precaution, Opera does not allow Web pages to link to files on the user's local disk. However, a flaw exists that allows Web pages to link to feed source files on the user's computer. Suitable detection of JavaScript events and appropriate manipulation can unreliably allow a script ...

ASP-DEV XM Events Diary - cat SQL Injection

ASP-DEV XM Events Diary - cat SQL Injection source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

ASP-DEV XM Events Diary - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

MyCal Personal Events Calendar Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar - Database Disclosure MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

No description provided by source. MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit:...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== MyCal Personal Events Calendar mycal.mdb Database Disclosure Vuln =================================================================== MyCal Personal Events Calendar...

evCal Events Calendar - Database Disclosure

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

ASP Portal - Multiple SQL Injections

---------------------------------------------------OffensiveTrack-------------------------------------------------------- ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact :...

ASP Portal - Multiple SQL Injections

ASP Portal - Multiple SQL Injections ---------------------------------------------------OffensiveTrack-------------------------------------------------------- ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website :...

developec-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities ========================================================================...

Logging event information is not HTML encoded in 500 error page

The Confluence 500 error page lists logging events generated during the request the produced the 500 error page. The strings rendered from this event are not HTML encoded, leaving open a chance for an attacker to exploit this via XSS. I haven't yet investigated to see whether this is actually...

Logging event information is not HTML encoded in 500 error page

The Confluence 500 error page lists logging events generated during the request the produced the 500 error page. The strings rendered from this event are not HTML encoded, leaving open a chance for an attacker to exploit this via XSS. I haven't yet investigated to see whether this is actually...

CVE-2008-4673

PHP remote file inclusion vulnerability in panel/common/theme/default/headersetup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the 1 pathdocroot and 2 component parameters...

Remote file inclusion

PHP remote file inclusion vulnerability in panel/common/theme/default/headersetup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the 1 pathdocroot and 2 component parameters...