CVE-2009-4266

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-4266

CVE-2009-4266 is a Cross-Site Scripting (XSS) vulnerability in the YABSoft AIHS Script, affecting search.php. The issue allows remote attackers to inject arbitrary web script or HTML via the text parameter in AIHS Script 2.2 (and possibly 2.3). The vulnerability is documented with a MEDIUM severi...

CVE-2009-4266

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-4252

Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4252

CVE-2009-4252 is an XSS vulnerability in the Clixint DPI Image Hosting Script DPI 1.1 Final (1.1F). The issue affects images.php and allows remote attackers to inject arbitrary web script or HTML via the date parameter. Several connected sources corroborate this: OpenVAS NASL entries describe a p...

CVE-2009-4252

Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...

Top Botnets By Name, Size And Scope

Botnets – apart from inundating out inboxes with spam – can also be used for ulterior purposes such as executing DDoS attacks or hosting websites, so understanding the “modus operandi” and size behind the well-known names is a good idea; Here’s a top ten botnet list. Read the full article. Help N...

ID Theft Gang Using Amazon's EC2 as Command and Control Server

Security researchers have intercepted a new variant of the Zeus crimeware using Amazon’s EC2 services to command and control the botnet. The cybercriminals appear to be using Amazon’s RDS managed database hosting service as a backend alternative in case they lose access to the original domain,...

Web Admins Targeted in Phishing Attack

Scam e-mail artists have launched a massive campaign to trick webmasters into giving up the credentials needed to administer their Web sites, targeting site owners at more than 90 online hosting providers. Read the full article. Washington Post...

Advanced Image Hosting v2.2 XSS

No description provided by source. Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

Advanced Image Hosting 2.2 XSS

Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. OpenVAS Vulnerability Test $Id: PowerPhloggerdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PowerPhlogger Detection Authors: Michael Meyer Copyright: Copyright c 2009...

Uploaderr 1.0 File Hosting Script - Arbitrary File Upload

Uploaderr 1.0 File Hosting Script - Arbitrary File Upload Exploit Title: Uploaderr - File Hosting Script Shell Upload Vulnerability Author: DigitALL Vendor: http://uploaderr.com Version: 1.0 Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Dork: "Instant Free File Uploader" Applicatio...

Uploaderr 1.0 File Hosting Script - Arbitrary File Upload

Exploit Title: Uploaderr - File Hosting Script Shell Upload Vulnerability Author: DigitALL Vendor: http://uploaderr.com Version: 1.0 Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Dork: "Instant Free File Uploader" Application: Please Add Files Your Shell And Upload. Shell : /upload...

Uploaderr 1.0 - File Hosting Script Shell Upload Vulnerability

No description provided by source. Exploit Title: Uploaderr - File Hosting Script Shell Upload Vulnerability Author: DigitALL Vendor: http://uploaderr.com Version: 1.0 Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Dork: "Instant Free File Uploader" Application: Please Add Files You...

Uploader 1.0 - File Hosting Script Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================== Uploaderr 1.0 - File Hosting Script Shell Upload Vulnerability ============================================================== Dork: "Instant Free File Uploader" Application:...

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution 974378 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported...

Microsoft GDI+ .NET Framework Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library within the .NET framework fails to properly handle certain API calls. Successful exploits can allow an attacker to execute arbitrary code with the privileges of the currently...