Unfixed XSS vulnerability at www.coastalbendcasa.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.coastalbendcasa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.aliantpioneers.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.aliantpioneers.com, which at the time of submission ranked 12514632 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. ...

Unfixed XSS vulnerability at www.ci.pinole.ca.us

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.ci.pinole.ca.us, which at the time of submission ranked 1897853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It i...

vanilla-xss.txt

GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...

e107 <= 0.7.11 Arbitrary Variable Overwriting

GulfTech Security Research August 07, 2008 Vendor : Steve Dunstan URL : http://www.e107.org/ Version : e107 = 0.7.11 Risk : Arbitrary Variable Overwriting Description: e107 is a popular full featured content management system written in php. Unfortunately e107 suffers from an arbitrary variable...

Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius = 0.5.4 Risk : SQL Injection Description: Gregarius is a popular web-based RSS/RDF/ATOM feed aggregator written in php. There are some SQL Injecti...

Gregarius 0.5.4 - SQL Injection

GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTREAD; $readItems - setTitleLBLH2RECENTITEMS; $readItems - setRenderOptionsILTITLENOESCAPE;...

Gregarius 0.5.4 - SQL Injection

Gregarius 0.5.4 - SQL Injection GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTREAD; $readItems - setTitleLBLH2RECENTITEMS; $readItems -...

ViArt Shop 3.5 - category_id SQL Injection

ViArt Shop 3.5 - categoryid SQL Injection GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injectio...

talldude-bypass.txt

GulfTech Security Research July 28, 2008 Vendor : Talldude Networks, LLC URL : http://www.jamroom.net/ Version : Jamroom = 3.3.8 Risk : Authentication Bypass Description: Jamroom is a popular online social media cms used to host artist sites and create music communities. It is vulnerable to a fla...

DDIVRT-2008-11 BadBlue uninst.exe DoS

Title ----- DDIVRT-2008-11 BadBlue uninst.exe DoS Severity -------- Medium Date Discovered --------------- March 5th 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and r@b13$ Vulnerability Description ------------------------- BadBlue is a...

Unfixed XSS vulnerability at www.kellenjames.com

Security researcher Stacker, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.kellenjames.com, which at the time of submission ranked 4084303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2008. It is...

Unfixed XSS vulnerability at www.jamescurrey.co.uk

Security researcher By Encore, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting www.jamescurrey.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is...

Unfixed XSS vulnerability at www.jamesbond007.se

Security researcher By Encore, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.jamesbond007.se, which at the time of submission ranked 3190831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Remote File Include In copyright © James Coyle; JCcorp

By Hasadya Raed Contact : [email protected] --------------------------------- Script : copyright © James Coyle; JCcorp Dork : copyright © James Coyle; JCcorp --------------------------------- B.File : createurl.php --------------------------------- Expl:...

IBM Rational ClearQuest Web - Cross Site Scripting

..........MMMMMMMM. ..... . .. ........7MMMMMMMMMM . .......... . ... ........OMMMMMMMMMM..................... ........8MMNMMMMMMMMMMMMMN.............. ........NMMMMMMMMMMMMMNNNND............. ....,DNMMMMMMMMMMMMMMMNDDD.............. ...DNNNNDMMMMMMMMMMMMMMNI...

script-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : copyright c James Coyle; JCcorp Expl : Remote Include File Dork : "copyright © James Coyle; JCcorp" ------------------------------------ B.File : createurl.php ------------------------------------ Exploit :...

Remote File Include In Script copyright (c) James Coyle; JCcorp

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : copyright c James Coyle; JCcorp Expl : Remote Include File Dork : "copyright © James Coyle; JCcorp" ------------------------------------ B.File : createurl.php ------------------------------------ Exploit :...

[SA22242] HAMweather "do_parse_code" Command Injection Vulnerability

TITLE: HAMweather "doparsecode" Command Injection Vulnerability SECUNIA ADVISORY ID: SA22242 VERIFY ADVISORY: http://secunia.com/advisories/22242/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HAMweather 3.x http://secunia.com/product/12178/ DESCRIPTION: Some...

CVE-2006-4711

Multiple cross-site scripting XSS vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite...