CVE-2012-0253: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via 1 the jsonRequest parameter to Direct/Process, the 2 r or 3 cb parameter to Direct/jsonp.htm, or 4 the cb parameter to sys/jsonp.app/.ht...

PT-2012-2440

Name of the Vulnerable Software and Affected Versions Demand Media Pluck SiteLife versions prior to 5.0.13 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the jsonRequest parameter to "Direct/Process", th...

CVE-2012-0765

Multiple cross-site scripting XSS vulnerabilities in Adobe RoboHelp 8 and 9 for Word allow remote attackers to inject arbitrary web script or HTML via a crafted URL, related to certain .htm files in 1 templatestock and 2 templatecsh directories...

Days edge of the business website system through the kill 0day-vulnerability warning-the black bar safety net

Bulkwww.google.cn inurl:Products. asp? mainid=1 Their attention to looking under the backend, and then modify the action=“”, address EXp: form name="administratoradd" method="post" id="password" action="" span class="rightbody" /span table width="9 9%" border="0" align="center" cellpadding="0"...

"$referer" export lead to the cross-site flaws in all versions of Discuz!

hi; All versions of Discuz! have the cross-site vulnerabilities because of the export value of "$referer". Like: Discuz! 7.X Discuz! 6.X Discuz! 5.X Discuz!NT 3.X and so on. There are some htm pages in all versions of Discuz!, that are: /templates/default/attachpay.htm /templates/default/ecrate.h...

Cross-Site Scripting vulnerabilities in Invision Power Board

Hello 3APA3A! I want to warn you about new vulnerabilities in Invision Power Board. These are Cross-Site Scripting vulnerabilities. Attack is going via attachment at click on the attachment in the post at forum or on the link to this attachment. These are persistent XSS vulnerabilities. I know fo...

Code injection

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-6542

CVE-2008-6542 affects DotNetNuke’s Skin Manager prior to 4.8.2. The vulnerability allows a remote authenticated administrator to trigger server-side execution of application logic by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM/HTML files. The...

CVE-2008-6542

Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file that is converted into a dynamic script via unknown vectors related to HTM or HTML files...

CVE-2008-4767: Improper Input Validation

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

CVE-2008-0124

Cross-site scripting XSS vulnerability in Serendipity S9Y before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via 1 the "Real name" field in Personal Settings, which is presented to readers of articles; or 2 a file upload, as demonstrated by a .htm, .html, or...

Design/Logic Flaw

RTEpopupsavefile.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload 1 .html and 2 .htm files via unspecified vectors...

CVE-2008-0473

RTEpopupsavefile.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload 1 .html and 2 .htm files via unspecified vectors...

mybb-change.txt

Hello,, Mybb Change Password Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] If You Can Use the debug mode you will be able to change the password for and user by knowing the registered email address Enter the...

CVE-2006-5913

Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...

CVE-2006-5913: Undefined Security Weakness

Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...

CVE-2006-2179: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the 1 SessionID parameter to login.asp or 2 ProductIndex parameter to browse0.htm...

[Kurdish Security #2] Artmedic Event Remote File Include Vulnerability

Original Advisory : http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html Artmedic Event Remote File Include Vulnerability Website : http://www.artmedic.de/ Script : Artmedic Event Script Risk : High Class : Remote Greetz : B3g0k,Nistiman,Flot,Netqurd etc.. d0rk :...

CVE-2004-2346: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Subject field in post1.htm and 2 the File Description field in postfile2.htm...

CVE-2003-0526: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...