Unfixed XSS vulnerability at theatreview.co.nz

Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting theatreview.co.nz, which at the time of submission ranked 16196224 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at movies.chennaivision.com

Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting movies.chennaivision.com, which at the time of submission ranked 75559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It...

Unfixed XSS vulnerability at www.flycell.com.mx

Security researcher i-ninja, has submitted on 25/07/2009 a cross-site-scripting XSS vulnerability affecting www.flycell.com.mx, which at the time of submission ranked 10619 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is...

PHP-I-BOARD from Let's PHP! vulnerable to directory traversal

Overview PHP-I-BOARD from Let's PHP! contains a directory traversal vulnerability. PHP-I-BOARD from Let's PHP! is a bulletin board software. PHP-I-BOARD contains a directory traversal vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

PHP-I-BOARD from Let's PHP! vulnerable to cross-site scripting

Overview PHP-I-BOARD from Let's PHP! contains a cross-site scripting vulnerability. PHP-I-BOARD from Let's PHP! is a bulletin board software. PHP-I-BOARD contains a cross-site scripting vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2009-2222

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail...

CVE-2009-2221

Cross-site scripting XSS vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2222

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail...

CVE-2009-2221

Cross-site scripting XSS vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Directory traversal

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail...

Cross site scripting

Cross-site scripting XSS vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2221

CVE-2009-2221 corresponds to a cross-site scripting (XSS) vulnerability in PHP-I-BOARD v1.2 and earlier. The issue allows remote attackers to inject arbitrary script or HTML via unspecified vectors, potentially causing arbitrary script execution in the user’s browser. Connected sources confirm af...

CVE-2009-2222

PHP-I-BOARD version 1.2 and earlier contains a directory traversal vulnerability that could allow a remote attacker to read arbitrary files on the server. The issue is described across multiple sources (including JVN entry JVN32788272 and JVNDB-2009-000046) as a traversal flaw likely related to m...

CVE-2009-2222

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail...

JVN#20219071 PHP-I-BOARD from Let's PHP! vulnerable to cross-site scripting

PHP-I-BOARD from Let's PHP! is a bulletin board software. PHP-I-BOARD contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...

i-Gallery 3.44.1 - streamfile.asp Multiple Directory Traversal Vulnerabilities

i-Gallery 3.44.1 - streamfile.asp Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/44467/info i-Gallery is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a speciall...

i-Gallery 3.4/4.1 - 'streamfile.asp' Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/44467/info i-Gallery is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to download and read...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

BLIND SQL INJECTION--Leap CMS 0.1.4-->

!/usr/bin/perl ----------------------------------------------- BLIND SQL INJECTION--Leap CMS 0.1.4-- ----------------------------------------------- CMS INFORMATION: --WEB: http://leap.gowondesigns.com/ --DEMO: http://php.opensourcecms.com/scripts/details.php?scriptid=161&name=Leap --CATEGORY: CM...