EUVD-2006-3831

Malware in sbrugna...

KMSoft Guestbook 1.0 - Database Disclosure Vulnerability

No description provided by source...

Simple PHP Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbook suffe...

远古视频点播系统注入漏洞

漏洞产生于文件/webmedia/oemui/user/guest.asp，访问这个页面需要注册 相关代码： szAgent = Request.ServerVariables"HTTPUSERAGENT" aTmpInfo = SplitszAgent, " ", -1, 1 aAgentInfo = SplitaTmpInfo1, "; ", -1, 1 szBrowser = aAgentInfo1 if RightaAgentInfo2, 1 = "" or RightaAgentInfo2, 1 = ";" then szOS = LeftaAgentInfo2,...

simpgbSQL.txt

Hi, The PHP guestbook SimpGB 1, written by Boesch IT-Consulting 2 can be exploited to gain userdata. The quote variable isn't checked carefully in simpgb/include/gbnew.inc called by guestbook.php. I wrote a proof of concept which shows a md5 hash and the username, read from the database...

GuppY 2.4 - HTML Injection

source: https://www.securityfocus.com/bid/8717/info It has been reported that one of the scripts included with GuppY is vulnerable to an HTML injection attack. The script, "postguest.php", does not perform input validation to prevent the inclusion of HTML/script content in messages posted to the...

ICQ Webfront - Persistant XSS

------------------------------------------------------------------ - EXPL-A-2003-024 exploitlabs.com Advisory 024 ------------------------------------------------------------------ -= ICQ Webfront =- Donnie Werner Sept 09 2003 exploitlabs.com Vunerabilitys: ---------------- 1. Persistant Remote X...

WebBBS Guestbook : Cross Site Scripting

WebBBS Guestbook : Cross Site Scripting Program : WebBBS Url vendor : http://awsd.com/scripts/webbbs/ Problem : Multiple Cross Site Scripting Vulnerabilities Author : Thierry LAVIE [email protected] Www : www.lavieangel.com DESCRIPTION : WebBBS is, as the name implies, a Web-based bulletin...

Planetmoon - Guestbook Clear Text Password Retrieval

source: https://www.securityfocus.com/bid/7167/info A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further attacks against a target user...