phpicalendar-xss.txt

PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...

TinyWebGallery <= 1.5 (image) Remote Include Vulnerabilities

No description provided by source. C Y B E R - W A R R i O R T I M TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------...

wisi-sql.txt

By: Jesus Tovar mail: [email protected] Greetz: Dario Struz Vendor: http://www.wsicorporate.com Digital Security Owner Dork: "Created and maintained by WSI" File Bug: /login.asp /admin/login.asp /admin/request.asp Sql Injection : ' or 'x'='x Site Examples: http://host.com/admin/login.asp...

Wisi Portal [Sql Injection By Jesus Tovar]

By: Jesus Tovar mail: [email protected] Greetz: Dario Struz Vendor: http://www.wsicorporate.com Digital Security Owner Dork: "Created and maintained by WSI" File Bug: /login.asp /admin/login.asp /admin/request.asp Sql Injection : ' or 'x'='x Site Examples: http://host.com/admin/login.asp...

MysqlDumper-1.21.txt

MysqlDumper Version 1.21 b6 Xss Vulnerability By CrackersChild [email protected] www.sibersavacilar.com Download Script http://www.mysqldumper.de/board/downloads.php?view=detail&id=17 Exploit www.site.com/mysqldumperpath/sql.php?db=Xss codes Examples...

oscommerce-page-txt

osCommerce multiple Scripts 'page' param XSS Vendor url: http://www.oscommerce.com Vendor Bugtracker:http://www.oscommerce.com/community/bugs,4303 Advisore: http://lostmon.blogspot.com/2006/10/ oscommerce-multiple-scripts-page-param.html Vendor notify:yes osCommerce contains a flaw that allows a...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

Trojan free kill hardcover tutorials-vulnerability warning-the black bar safety net

The first part: of the domestic and foreign antivirus analysis In speaking of the positioning memory feature code before the first analysis of domestic and foreign famous antivirus memory search Kill features. Everyone in the use of the Trojan process will discover, the memory of killing, general...

windowsitpro.txt

Windowsitpro.com Homepage: http://www.windowsitpro.com Effected files: Search input box Downloading whitepapers Search input box xss vuln with cookie disclosure: We convert our javascript to hex format so we don't recieve the default "Your request cannot be processed as this time" error message...

Module's Name Content<<--V1.0 SQL injection

======================================== Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ======================================== Example:-...

[NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability

ViArt Shop v2.5.5 Free and possibly Light, Standard, and Enterprise Authors Site: http://www.codetosell.com/ +-Examples:--------------------------------------------------+ XSS: /forum.php?forumid="scriptalert'XSS';/script&categoryid=1...

singapore097.txt

SOFTWARE: ========= singapore v0.9.7 DESCRIPTION: ============ The system is vulnerable to various XSS attacks google dork : "Powered by singapore v0.9.7" inurl:index.php?gallery 429 results : xss code example ================ www.site.com/images/index.php?gallery=gallery name&image=...

Sire 2.0 Nws Remote File inclusion & Arbitary Files Upload

by Moroccan Security Team Geetz To All Freind +File Inclusion: Input passed to the "rub" parameter in "lire.php" isn't properly verified, before it is used to include remote files Successful exploitation requires that "registerglobals" is enabled. lire.php code ? 73...

TotalECommerce 1.0 - index.asp?id SQL Injection

TotalECommerce 1.0 - index.asp?id SQL Injection Original advisory: http://www.nukedx.com/?viewdoc=18 Advisory by: nukedx Full PoC Explotation: GET - http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...

cubecartXSS.txt

CubeCart 3.0.7-pl1 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=459 Advisore:http://lostmon.blogspot.com/2006/01/ cubecart-307-pl1-indexphp-multiple.html. vendor notify:yes exploit avalable: yes I recomended to all vendors ...

INCOGEN Bugport 1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16123/info Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

CVE-2005-4838

Multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 el/functions.jsp, 2 el/implicit-objects.jsp, and 3 jspx/textRotate.jspx in examples/jsp2/, as demonstrated via...

SimpleBBS 1.1 - Remote Command Execution (C)

SimpleBBS 1.1 - Remote Command Execution C / SimpleBBS !--total 188 drwxrwxrwx 2 f1 f1 4096 Dec 6 17:02 . drwxr-xr-x 7 f1 f1 4096 Nov 17 2002 .. -rw-r--r-- 1 f1 f1 916 Oct 20 09:30 WSFTP.LOG -rwxrwxrwx 1 f1 f1 28 Nov 17 2002 categories.php -rwxrwxrwx 1 f1 f1 151 Dec 7 09:11 forums.php -rwxrwxrwx ...

Top Music Module 3.0 - SQL Injection

Top Music Module 3.0 - SQL Injection source: https://www.securityfocus.com/bid/15581/info Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

JBB SQL inj. vuln.

JBB SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jbb-sql-inj-vuln.html Vendor:http://www.joelh.de/jbb/ affected version: jbb 0.9.9rc3 and prior Vuln. description: Input passed to the "nr" parameter in "topiczeigen.php", "forum"...