yapig-php.txt

!/usr/bin/php ? / YaPiG 0.92b addcoment PHP Insertion Proof of Concept By aCiDBiTS acidbitshotmail.com 07-August-2004 Description: YaPiG http://yapig.sourceforge.net/ is a PHP Image Gallery script. This Proof of Concept creates a php file that echoes a notice. First it determines a valid photo...

CVE-2004-0203

Cross-site scripting XSS vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query...

CVE-2004-0588

Cross-site scripting XSS vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages...

eaea.class.php.txt

|| Raza Mexicana Hackers Team - http://www.raza-mexicana.org / // Just change this vars ------------------------------ $hackernick = 'hax0r'; $hackerpass = 'eaea'; $basepathurl = "/home/victim/publichtml/"; -- ending slash // ---------------------------------------------------- $body = END ?php...

CVE-2003-1384

Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...

CVE-2003-1243

Cross-site scripting vulnerability XSS in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script via the mod parameter...

[UNIX] bMachine Cross Site Scripting Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

rnnguest12.txt

RNN's Guestbook 1.2 Multiple Vulnerabilies Discovered by Chris Rahm aka: BrainRawt brainrawt at haxworx.com Vulnerabilities: Remote Command Execution Administrative Access Information Disclosure Reading of Files Arbitrary HTML Insertion/Script Injection Plain Text Administrative Password Remote:...

RNN's Guestbook 1.2 Multiple Vulnerabilities

RNN's Guestbook 1.2 Multiple Vulnerabilies Discovered by Chris Rahm aka: BrainRawt brainrawt at haxworx.com Vulnerabilities: Remote Command Execution Administrative Access Information Disclosure Reading of Files Arbitrary HTML Insertion/Script Injection Plain Text Administrative Password Remote:...

CVE-2003-0769

Cross-site scripting XSS vulnerability in the ICQ Web Front guestbook guestbook.html allows remote attackers to insert arbitrary web script and HTML via the message field...

CVE-2003-0769

Cross-site scripting XSS vulnerability in the ICQ Web Front guestbook guestbook.html allows remote attackers to insert arbitrary web script and HTML via the message field...

ASP.NET crossite scripting protection bypass

It's possible to insert null character after tag opening...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

Gopherd <= 3.0.5 FTP Gateway Remote Overflow Exploit

Exploit for linux platform in category remote exploits ==================================================== Gopherd root 1 Dec 31 23:59 " to exploit this, there needs to be...

CVE-2003-0504

Multiple cross-site scripting XSS vulnerabilities in Phpgroupware 0.9.14.003 aka webdistro allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.php in the addressbook module...

CVE-2003-0488

Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via 1 the addname parameter in the addacl module, or 2 the alias parameter in the domap module...

CVE-2003-0483

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...

CVE-2003-0481

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to fileselect.php...

CVE-2003-0446

Cross-site scripting XSS in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message...

CVE-2003-0442

Cross-site scripting XSS vulnerability in the transparent SID support capability for PHP before 4.3.2 session.usetranssid allows remote attackers to insert arbitrary script via the PHPSESSID parameter...