HIOX GUEST BOOK (HGB) 4.0 Remote Code Execution Vulnerability

No description provided by source. +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

HIOX GUEST BOOK HGB 4.0 - Remote Code Execution +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Unfixed Script Insertion vulnerability at upload66.com

Security researcher GURUS, has submitted on 31/03/2007 a Script Insertion vulnerability affecting upload66.com, which at the time of submission ranked 92176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is currently unfixed. If...

Unfixed Script Insertion vulnerability at upload02.uploadpk.com

Security researcher GURUS, has submitted on 24/03/2007 a Script Insertion vulnerability affecting upload02.uploadpk.com, which at the time of submission ranked 310870 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2007. It is currently...

Authentication flaw

admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request...

CVE-2007-1603

CVE-2007-1603 describes an authentication bypass in admin/contest.php of the Weekly Drawing Contest 0.0.1, enabling remote attackers to bypass login and insert new contest information via a direct POST request. The CVSS vector (AV:N/AC:L/Au:N/C:P/I:P/A:P) yields a base score of 7.5 (HIGH), indica...

CVE-2007-1603: Undefined Security Weakness

admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request...

Hidden ASP the back door of the three methods-vulnerability warning-the black bar safety net

1, The establishment of a non-standard directory: mkdir images..\ A copy of the ASP Trojan to the directory: copy c:\inetpub\wwwroot\news.asp c:\inetpub\wwwroot\images..\news.asp Through the web Access ASP Trojan: http://ip/images../news.asp?action=login How to delete a non-standard directory:...

Unfixed Script Insertion vulnerability at phpfaber.org

Security researcher GURUS, has submitted on 14/03/2007 a Script Insertion vulnerability affecting phpfaber.org, which at the time of submission ranked 334388 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/03/2007. It is currently unfixed. I...

Unfixed Script Insertion vulnerability at www.urlshare.org

Security researcher DarkToxic, has submitted on 03/03/2007 a Script Insertion vulnerability affecting www.urlshare.org, which at the time of submission ranked 1096735 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is currently...

Unfixed Script Insertion vulnerability at www.zurna.com

Security researcher i-landet, has submitted on 24/02/2007 a Script Insertion vulnerability affecting www.zurna.com, which at the time of submission ranked 54886 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/02/2007. It is currently unfixed...

[Full-disclosure] Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities

====================================================================== Secunia Research 14/02/2007 - MailEnable Web Mail Client Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

Unfixed Script Insertion vulnerability at www.sceneupload.com

Security researcher GURUS, has submitted on 02/04/2007 a Script Insertion vulnerability affecting www.sceneupload.com, which at the time of submission ranked 246579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2007. It is currently...

[SA23908] Drupal Project Module Script Insertion Vulnerability

TITLE: Drupal Project Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA23908 VERIFY ADVISORY: http://secunia.com/advisories/23908/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Drupal Project Module 4.x http://secunia.com/product/12912/ DESCRIPTION:...

[SA23754] WebGUI User Name Script Insertion Vulnerability

TITLE: WebGUI User Name Script Insertion Vulnerability SECUNIA ADVISORY ID: SA23754 VERIFY ADVISORY: http://secunia.com/advisories/23754/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 7.x http://secunia.com/product/13252/ DESCRIPTION: A vulnerabili...

Unfixed Script Insertion vulnerability at oc.course.com

Security researcher chaunchothenacho, has submitted on 01/11/2007 a Script Insertion vulnerability affecting oc.course.com, which at the time of submission ranked 40208 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...

Unfixed Script Insertion vulnerability at randomdude.com

Security researcher Mutant, has submitted on 01/10/2007 a Script Insertion vulnerability affecting randomdude.com, which at the time of submission ranked 1337729 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/10/2007. It is currently unfixe...

Unfixed Script Insertion vulnerability at www.mastermindtoys.com

Security researcher tenest, has submitted on 01/10/2007 a Script Insertion vulnerability affecting www.mastermindtoys.com, which at the time of submission ranked 168166 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is currently...

Unfixed Script Insertion vulnerability at www.mastermindtoys.com

Security researcher tenest, has submitted on 01/10/2007 a Script Insertion vulnerability affecting www.mastermindtoys.com, which at the time of submission ranked 168166 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is currently...

[SA23484] OvBB Script Insertion Vulnerability

TITLE: OvBB Script Insertion Vulnerability SECUNIA ADVISORY ID: SA23484 VERIFY ADVISORY: http://secunia.com/advisories/23484/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: OvBB 0.x http://secunia.com/product/13131/ DESCRIPTION: A vulnerability has been...