CVE-2009-3452

WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...

CVE-2009-3450

The CVE-2009-3450 entry describes multiple XSS vulnerabilities in WebCoreModule.ashx of RADactive I-Load before 2008.2.5.0. The issue stems from input parameters whose names begin with __ (double underscore), which bypasses the built‑in ASP.NET XSS protection and allows remote attackers to inject...

Vastal I-Tech Agent Zone - 'view_listing.php' SQL Injection

source: https://www.securityfocus.com/bid/36503/info Agent Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Real Estate Script For Realtors SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

Toner Cart SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

RADactive I-Load多个信息泄露和代码执行漏洞

I-Load是一个ASP.NET组件，用于在ASP.NET应用中管理图形上传。 I-Load组件中存在多个安全漏洞，允许远程攻击者泄露敏感信息、执行跨站脚本或入侵有漏洞的系统。 1 WebCoreModule.ashx脚本会在某些请求和响应中显示保存图形文件夹的绝对路径。 2 WebcodeModule.ashx所使用的大多数参数以两个下划线字符开始，这会禁用内置的ASP.NET防跨站脚本功能。某些参数没有得到充分的过滤，导致向响应中注入任意JavaScript。 3 WebCoreModule.ashx中的目录遍历漏洞允许攻击者在服务器上读取任意文件，包括配置文件、应用源码等。 4...

Vastal I-Tech DVD Zone - view_mag.php Cross-Site Scripting

Vastal I-Tech DVD Zone - viewmag.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities

SEC Consult Security Advisory 20090917-0 ======================================================================= title: Multiple Vulnerabilities in RADactive I-Load products: RADactive I-Load vulnerable version: = I-Load 2008.2.4.0 fixed version: I-Load 2008.2.5.0 impact: critical homepage:...

Unfixed XSS vulnerability at 2006.summer-spirit.de

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting 2006.summer-spirit.de, which at the time of submission ranked 14374731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It...

Unfixed XSS vulnerability at funnylink.de

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting funnylink.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Unfixed XSS vulnerability at ennews.pku.edu.cn

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting ennews.pku.edu.cn, which at the time of submission ranked 8297 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at www.barbaradruwe.de

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting www.barbaradruwe.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at www.dasliterarischequartett.de

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting www.dasliterarischequartett.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. ...

Unfixed XSS vulnerability at www.citme.com.cn

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting www.citme.com.cn, which at the time of submission ranked 4719380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at www.aspasiabooks.com

Security researcher Ehl-i Beyt, has submitted on 09/05/2009 a cross-site-scripting XSS vulnerability affecting www.aspasiabooks.com, which at the time of submission ranked 6362267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It i...

[SECURITY] Fedora 10 Update: squid-3.0.STABLE18-1.fc10

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Directory Escort Script Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Directory Escort script Search Xss vulnerability + Software : Directory Escort script + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...

Unfixed XSS vulnerability at www.sne.org

Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting www.sne.org, which at the time of submission ranked 3627979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is current...

Unfixed XSS vulnerability at metlink.org

Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting metlink.org, which at the time of submission ranked 6038336 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is current...

Unfixed XSS vulnerability at www.gggames.se

Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting www.gggames.se, which at the time of submission ranked 26757807 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...