BaconMap 1.0 - SQL Injection

BaconMap 1.0 - SQL Injection ------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........SQL Injection Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested On...............Windows Vis...

BaconMap 1.0 SQL Injection

------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........SQL Injection Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested On...............Windows Vista + XAMPP...

BaconMap 1.0 - SQL Injection

------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........SQL Injection Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested On...............Windows Vista + XAMPP...

Mailman -- cross-site scripting in web interface

Secunia reports: Two vulnerabilities have been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input passed via the list descriptions is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary...

Parallels Plesk Sitebuilder Persistent Xss Vulnerability

Exploit for php platform in category web applications ======================================================== Parallels Plesk Sitebuilder Persistent Xss Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Flock Browser 3.0.0.3989 Malformed Bookmark Cross Site Scripting

Flock Browser 3.0.0.3989 Malformed Bookmark XSS Vendor URL: http://beta.flock.com/ Advisore: http://lostmon.blogspot.com/2010/08/flock-browser-3003989-malformed.html Vendor notify:NO exploits availables:YES Flock is faster, simpler, and more friendly. Literally. It's the only sleek, modern web...

Script Insertion Vulnerabilities in ArtGK CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ArtGK CMS which could be exploited to perform script insertion attacks. 1 Script insertion vulnerabilities in ArtGK CMS 1.1 Input passed to the "content" parameter in cms/classes/CForm.php is not properly sanitiz...

Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability

====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

PHPCMS all versions of a page cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Two versions 1, Official demo page for the url xss. 2, official the Master Station of the error reporting page,$info'errorlink'to go from the referer,change the referer to insert arbitrary code. Little harm, the vulnerability level is low. Test code: POC1:...

Script Insertion Vulnerability in Eden Platform

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Eden Platform which could be exploited to perform script insertion attacks. 1 Script insertion vulnerabilities in Eden Platform Input passed to multiple parameters in testimonials/admin/list is not properly sanitized A remo...

Unfixed Script Insertion vulnerability at www.lespac.com

Security researcher h3xStream, has submitted on 24/07/2010 a Script Insertion vulnerability affecting www.lespac.com, which at the time of submission ranked 10677 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is currently...

Multiple Vulnerabilities in Amethyst

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amethyst which could be exploited to perform cross-site scripting, script insertion and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Amethyst The vulnerability exists due to inp...

Unfixed XSS vulnerability at www.wingclips.com

Security researcher nullbyt3, has submitted on 17/07/2010 a cross-site-scripting XSS vulnerability affecting www.wingclips.com, which at the time of submission ranked 372738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

CVE-2010-2629: Improper Input Validation

The Cisco Content Services Switch CSS 11500 with software 8.20.4.02 and the Application Control Engine ACE 4710 with software A23.0 do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling...

Multiple Vulnerabilities in Pixie

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixie which could be exploited to perform cross-site scripting, script insertions and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Pixie The vulnerability exists due to input...

Unfixed Script Insertion vulnerability at www.tinyurlscript.info

Security researcher Ravac, has submitted on 28/06/2010 a Script Insertion vulnerability affecting www.tinyurlscript.info, which at the time of submission ranked 1469036 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

Unfixed Script Insertion vulnerability at www.conversationasaradicalact.com

Security researcher solipsistic, has submitted on 27/06/2010 a Script Insertion vulnerability affecting www.conversationasaradicalact.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2010. It i...

Unfixed Script Insertion vulnerability at www.theworldcafe.com

Security researcher solipsistic, has submitted on 27/06/2010 a Script Insertion vulnerability affecting www.theworldcafe.com, which at the time of submission ranked 788817 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2010. It is...

Cross-site Scripting (XSS) Vulnerabilities in CruxPA

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CruxPA which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in CruxPA: CVE-2010-2718 The vulnerability exists due to input sanitation err...

Fixed Script Insertion vulnerability at cazey.friendsmix.net

Security researcher benzo, has submitted on 20/06/2010 a Script Insertion vulnerability affecting cazey.friendsmix.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently fixed...