CVE-2008-3404

Cross-site scripting XSS vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitrary web script or HTML via the link parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitrary web script or HTML via the link parameter...

CVE-2008-3404

CVE-2008-3404 is a cross-site scripting (XSS) vulnerability in MJGuest 6.8 GT, specifically in guestbook.js.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the link parameter. Affected: MJGuest 6.8 GT (component/file: guestbook.js.php). Root cause des...

mjguest68-xss.txt

---------------------------------------------------------------- Script : MJGuest 6.8 GT Type : Cross Site Scripting Vulnerability Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Our Team : IRCRASH My Official Website :...

MJGuest 6.8 GT Cross Site Scripting Vulnerability

---------------------------------------------------------------- Script : MJGuest 6.8 GT Type : Cross Site Scripting Vulnerability Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Our Team : IRCRASH My Official Website :...

CVE-2008-2268

Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter in a redirect action to mjguest.php. NOTE: this is user-assisted because...

CVE-2008-2187

CVE-2008-2187 is an XSS vulnerability affecting Mjguest 6.7 GT Rev.01, where a remote attacker can inject arbitrary script via the level parameter in a redirect action (potentially involving interface/redirect.htm.php). The linked records (NVD, CVE listings) confirm the vulnerable component (mjgu...

Sql injection

SimBin GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier allow remote attackers to cause a denial of service client disconnection via an empty UDP packet to the server port...

CVE-2007-1170

The CVE-2007-1170 entry affects SimBin games: GTR - FIA GT Racing Game 1.5.0.0 and earlier, GT Legends 1.1.0.0 and earlier, GTR 2 1.1 and earlier, and RACE - The WTCC Game 1.0 and earlier. The underlying issue is a remote attacker sending an empty UDP packet to the server port, causing a denial o...

TSEP <= 0.942 (colorswitch.php) Remote Inclusion Vulnerability

No description provided by source. Script: TSEP = 0.942 URL: www.tsep.info Discovered: beford xbefordx gmail com Comments: "registerglobals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code:...