2863 matches found
Shoot off piikee auction website system injection vulnerability and fix-vulnerability warning-the black bar safety net
Because there are no manufacturers, just write a bidding system to it, came out good to With this system webmasters mind you. The system is called: shoot off piikee auction website system Why say 2B? The reception is all the files the parameter values are such, we see this code newsarc.php ? php...
MySQLDumper 1.24.4 Multiple Vulnerabilities
Exploit for php platform in category web applications ================================================================================================ Vulnerable Software: MySQLDumper Version 1.24.4 Downloaded from: http://sourceforge.net/projects/mysqldumper/files/ MD5 SUM:...
Google Warns 20,000 Webmasters About 'Weird Redirects'
The head of Google’s Web spam team says that the company has pushed warning messages to some 20,000 Web site owners that their sites may be compromised and are performing “weird” redirections, possibly to malicious Web sites. Matt Cutts used a Twitter message on Tuesday to announce that the compa...
Microsoft .NET Framework Parameter Validation Remote Code Execution Vulnerability
Description The .NET Framework is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will cause denial-of-service conditions. In a web hosting environment,...
Simple Image Hosting script Arbitrary File Upload
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Advanced POWER Web Hosting CSRF
Exploit for php platform in category web applications Exploit Title: Advanced POWER Web Hosting CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/advanced-power-web-hosting-directory-script-php/22752/ Category:: webapps Demo :...
Hosting Directory CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Hosting Directory CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/hosting-directory-script/27433/ Category:: webapps Demo : http://www.e-soft24.com/scripts/hosting-directory/admin Greetz: Inj3ct...
DirectAdmin v1.403 - Cross Site Scripting Vulnerability
Document Title: =============== DirectAdmin v1.403 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=486 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 486...
Meinfoway - SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================================== Meinfoway - SQL Injection Vulnerability ========================================================================== Title: Meinfoway - SQL Injection Vulnerability Author...
PhotoHost - Run Your Own Image Hosting Service CSRF
Exploit for php platform in category web applications Exploit Title: PhotoHost - Run Your Own Image Hosting Service CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/photohost-run-your-own-image-hosting-service/28803/ Category:: webapps Demo :...
Role of free Hosting in Cyber Crime
Role of free Hosting in Cyber Crime Zscaler experts notice that free hosting and DNS providers abused for hosting Phishing Pages, Spamming, Botnets or Malwares. Many free hosted sites considered as spam. They list "x90x.net" Free hosting Provider which used to host many Facebook Phishing sites...
ServerPro Web Hosting Defaced by Team L0g!cs
ServerPro Web Hosting Defaced by Team L0g!cs Web hosting provider ServerPro has been compromised and completely defaced by hacking group named "Team L0g!cs". ServerPro boasts to have over 200,000 clients over a 10 year stand. Shown Defacement page that showcases information about the hack and the...
Irongeek's Shared hosting MD5 Change Detection Script
Irongeek's Shared hosting MD5 Change Detection Script Adrian Crenshaw aka Irongeek just release another great tool for web admins that will monitor the files on a website, and report any changed via email. Actually "irongeek.com" was hacked few days back which is hosted on a shared hosting. There...
Interspire Shopping Cart Insecure Permissions
========= Product: Interspire Shopping Cart ========= Problem: config/config.php MUST be httpd-readable inter-domain read access permitted, which is a problem on shared hosting ========= About product: What is Interspire Shopping Cart? Interspire Shopping Cart is the most feature rich, all-in-one...
AtWiki Cross Site Scripting
Exploit Title: @Wiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://atwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wiki-cross-site-scripting.html...
CVE-2012-1050
Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted Host header...
Sites Hosted by Hacking Victim Dreamhost Redirected To Scam Page
A report from Web security firm zScaler finds that Web pages hosted by the firm Dreamhost are being redirected to a scam Web site in Russia following a hack of the company’s servers last month. In a blog post, zScaler Senior Security Researcher Julien Sobrier reports that his firm, which secures...
CVE-2012-0975
Cross-site scripting XSS vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter...
