HotScripts Clone Script - SQL Injection

--==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK google:...

HotScripts Clone Script Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ HotScripts Clone Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz ...

HotScripts Clone Script Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== HotScripts Clone Script Remote SQL Injection Vulnerability ==========================================================...

samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

CVE-2007-5833

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

CVE-2007-5833

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

Improper access control

eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efilemanconfig.pm...

Unfixed XSS vulnerability at health.mytelus.com

Security researcher www.r3t.n3t.nl, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting health.mytelus.com, which at the time of submission ranked 11981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It i...

php cross-site cookie insertion

The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...

Design/Logic Flaw

Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs...

PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...

DEBIAN-CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

Microsoft ActiveSync弱口令混淆信息泄露漏洞

BUGTRAQ ID: 25976 CVECAN ID: CVE-2007-5460 Microsoft ActiveSync是用于同步计算机与PDA的应用程序。 ActiveSync设备建立连接口令交换的过程实现上存在漏洞，攻击者可能利用此漏洞获取口令信息。 插入到USB口时设备会使用类似于标准网络接口的连接，获得IP地址后设备会通过RAPI在990/TCP端口初始化与主机的通讯，这个过程也会经历一个小型的握手例程，如果合适的话，会对主机挑战设备PIN或口令。用户提供了主机的PIN/口令后，会通过XOR与E9固定密钥进行混淆，然后通过USB网络连接发送给设备进行验证。...

Microsoft SharePoint Server跨站脚本漏洞（MS07-059）

BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...

MagniComp SysInfo Agent Accessible

The MagniComp SysInfo agent on the remote host allows the Nessus server to retrieve information about the system's assets and configuration, which could help an attacker plan more focused attacks against the affected host. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-5264

Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information...

drbguestbook-xss.txt

Oo Title: DRBGuestbook Remote XSS Vulnerability Download: http://www.hotscripts.com/jump.php?listingid=67702&jumptype=1 Author: Gokhan Contact: [email protected] | KAF KAF KAF SIN SIN SIN KAFSIN KAFSIN KAF Vuln Code: index.php XSS: http://site/guestbook/index.php?action=alert"XSS"; Tum islam...

Unfixed XSS vulnerability at www.dbox2.info

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.dbox2.info, which at the time of submission ranked 330398 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...

CVE-2007-5130

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...