Linkubator XSS / SQL Injection

+=================================================================+ xTitle : linkubator catid Blind Sql & xss Injection Vulnerability xSoftware : linkubator xDescription : Free Link Exchange for Clients & Friends of Green Web Design xVendor : http://www.linkubator.ws xVersion : unknown xDate : 26...

Unfixed XSS vulnerability at www.bowlinggreenrents.com

Security researcher md.r00t, has submitted on 07/11/2008 a cross-site-scripting XSS vulnerability affecting www.bowlinggreenrents.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/07/2009. It is...

Joomla Component DBQuery <= 1.4.1.1 RFI Vulnerability

No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion

Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Fixed XSS vulnerability at www.greenmountainclub.org

Security researcher THEMILLER, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.greenmountainclub.org, which at the time of submission ranked 1147219 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. ...

CVE-2007-3241

Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...

CVE-2007-3241

Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...

CVE-2007-3241

CVE-2007-3241 is a cross-site scripting (XSS) vulnerability in the blogroll.php file of the cordobo-green-park WordPress theme. The issue arises from improper handling of the PHP_SELF portion of a URI, allowing remote attackers to inject arbitrary web script or HTML. Affected software: WordPress ...

WordPress Cordobo Green Park Theme - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the PHPSELF portion of a URI. Solution Update the theme...

Broiler erection of space to upload what the web server is not found-bug warning-the black bar safety net

I'm here to introduce two ultra-compactweb server. 1: a Small HTTP Server v3. 0 3 9 Operating environment: Win95/Win98/Win2000 Size: 93K, little was amazing!!!） Content Description: a compact WEB server, the footprint is very small, support CGI1. 1, SSI, AND PHP. 下载 地址...

Unfixed XSS vulnerability at www.usa-green-card.com

Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.usa-green-card.com, which at the time of submission ranked 271872 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...

CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...

CVE-2006-1930

Green Minute, versions 1.0 and earlier, contains multiple SQL injection vulnerabilities in userscript.php exploitable via the huserid, pituus, or date parameters. The vendor disputes the flaw, claiming those parameters are checked with preg_match before use, and CVE analyses found only non-sensit...

PT-2006-2914 · Unknown · Green Minute

Name of the Vulnerable Software and Affected Versions: Green Minute versions 1.0 and earlier Description: Multiple SQL injection vulnerabilities in userscript.php allow remote attackers to execute arbitrary SQL commands via the huserid, pituus, or date parameters. The vendor has disputed this...