1512 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ytmpw parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...
CVE-2014-4520
Cross-site scripting XSS vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugindir parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugindir parameter...
CVE-2014-4516
Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...
CuteNews <= 1.4.1 (shell inject) Remote Command Execution Exploit
No description provided by source. ?php ---cuten141xpl.php 7.13 03/11/2005 CuteNews 1.4.1 shell injection by rgod site: http://rgod.altervista.org usage: launch form Apache, fill in requested fields, then go! make these changes in php.ini if you have troubles with this script:...
vCard PRO 3.1 - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : vCard PRO 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeri...
Wallpaper Script 3.5.0082 - Stored XSS Vulnerability
No description provided by source. Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1 Register and log on as a...
DUware DUamazon Pro 3.0/3.1 productDelete.asp iCat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability
No description provided by source. Document Title: =============== OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1110 Release Date: ============= 2013-10-13 Vulnerability Laboratory ID...
mySeatXT 0.2134 - SQL Injection
No description provided by source. + Exploit: mySeatXT 0.2134 + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/myseat 1 Sql Injection PoC: http://localhost/mySeatXT/web/ajax/autocompleteres.php?term=99' 'SQL INJECT' Vulnerable...
miniCMS 1.0 & 2.0 - PHP Code Inject
No description provided by source...
PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities
No description provided by source. Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal...
DUware DUamazon Pro 3.0/3.1 productEdit.asp iCat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
Script Upload Up Your Shell (Sql Inject)
No description provided by source...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHPUpdate = 2.7 extract auth bypass / shell inject by rgod dork: Powered by PHP-Update -site:www.php-update.co.uk mail: retrog at alice dot it site:...