Centra 7 XSS Exploit

Centra is a program used by businesses and colleges, it allows users to stream microsoft office and other applications over the web in a nice enviroment with voip options. However on root directory when you go in to enroll for a session if you create or modify your username, first name, or last...

[Full-disclosure] XAMPP

------------------------------------------------------------ - EXPL-A-2005-006 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - XAMPP - OVERVIEW ======== XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really ve...

Liferay Cross Site Scripting Flaw

Advisory Name: Liferay Cross Site Scripting flaw Release Date: 05/22/2004 Application: Liferay www.liferay.com Author: Sandeep Giri Vendor Status: Notified 4 months ago Overview: Taken from http://www.liferay.com/products/index.jsp Liferay Enterprise Portal was designed to: Provide organizations...

Thread-IT Message Board XSS Vulnerability

Thread-IT Message Board XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Thread-IT Message Board Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Thread-IT is a simple message board product that...

Newsscript 1.0 - Administrative Privilege Escalation

Newsscript 1.0 - Administrative Privilege Escalation source: https://www.securityfocus.com/bid/7705/info A vulnerability has been reported that could enable a member of the news system to create and access an administrative account. This is due to insufficient validation of data supplied to accou...

ISC guestbook script injection vulnerability.

This advisory can be found at www.blacktigerz.org Date: 08.04.2003 Subject: ISC guestbook script injection vulnerability. Description: Free, easy to use asp powered guestbook. Main fetures are: web-based administration, bad word filtering. Vendor: http://www.isc-online.at Download:...

Sakki's guestbook V.1.01 script injection vulnerability.

This advisory can be found at www.blacktigerz.org. Description: Easy to manage and configure asp powered guestbook. Works with MS Access database or without it. Vendor: http://www.sakki.net Vulnerability: gb.asp neglects filtering user input allowing for script injection to the guestbook via "nam...

List Site Pro 2.0 - User Database Delimiter Injection

List Site Pro 2.0 - User Database Delimiter Injection source: https://www.securityfocus.com/bid/6685/info List Site PRO is a top site ranking system that counts hits from member sites and then ranks them according to the number of hits. A problem has been reported for List Site PRO that would all...

CVE-2002-0732

Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as 1 user name or 2 comments...

CVE-2002-0136

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...