Unfixed XSS vulnerability at www.coastalbendcasa.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.coastalbendcasa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at database.iem.ac.ru

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting database.iem.ac.ru, which at the time of submission ranked 21542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.gslc-bsa.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.gslc-bsa.org, which at the time of submission ranked 748576 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.stjeromeschool.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.stjeromeschool.com, which at the time of submission ranked 21314366 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. ...

Unfixed XSS vulnerability at www.airtec-aria.it

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.airtec-aria.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/10/2010. It is...

Unfixed XSS vulnerability at digitaldecatur.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting digitaldecatur.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

vanilla-xss.txt

GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...

e107 <= 0.7.11 Arbitrary Variable Overwriting

GulfTech Security Research August 07, 2008 Vendor : Steve Dunstan URL : http://www.e107.org/ Version : e107 = 0.7.11 Risk : Arbitrary Variable Overwriting Description: e107 is a popular full featured content management system written in php. Unfortunately e107 suffers from an arbitrary variable...

Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius = 0.5.4 Risk : SQL Injection Description: Gregarius is a popular web-based RSS/RDF/ATOM feed aggregator written in php. There are some SQL Injecti...

Gregarius 0.5.4 - SQL Injection

Gregarius 0.5.4 - SQL Injection GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTREAD; $readItems - setTitleLBLH2RECENTITEMS; $readItems -...

Gregarius 0.5.4 - SQL Injection

GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTREAD; $readItems - setTitleLBLH2RECENTITEMS; $readItems - setRenderOptionsILTITLENOESCAPE;...

talldude-bypass.txt

GulfTech Security Research July 28, 2008 Vendor : Talldude Networks, LLC URL : http://www.jamroom.net/ Version : Jamroom = 3.3.8 Risk : Authentication Bypass Description: Jamroom is a popular online social media cms used to host artist sites and create music communities. It is vulnerable to a fla...

ViArt Shop 3.5 - category_id SQL Injection

ViArt Shop 3.5 - categoryid SQL Injection GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injectio...

DDIVRT-2008-11 BadBlue uninst.exe DoS

Title ----- DDIVRT-2008-11 BadBlue uninst.exe DoS Severity -------- Medium Date Discovered --------------- March 5th 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and r@b13$ Vulnerability Description ------------------------- BadBlue is a...

Unfixed XSS vulnerability at www.kellenjames.com

Security researcher Stacker, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.kellenjames.com, which at the time of submission ranked 4084303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2008. It is...

Unfixed XSS vulnerability at www.jamescurrey.co.uk

Security researcher By Encore, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting www.jamescurrey.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is...

Unfixed XSS vulnerability at www.jamesbond007.se

Security researcher By Encore, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.jamesbond007.se, which at the time of submission ranked 3190831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Remote File Include In copyright © James Coyle; JCcorp

By Hasadya Raed Contact : [email protected] --------------------------------- Script : copyright © James Coyle; JCcorp Dork : copyright © James Coyle; JCcorp --------------------------------- B.File : createurl.php --------------------------------- Expl:...

IBM Rational ClearQuest Web - Cross Site Scripting

..........MMMMMMMM. ..... . .. ........7MMMMMMMMMM . .......... . ... ........OMMMMMMMMMM..................... ........8MMNMMMMMMMMMMMMMN.............. ........NMMMMMMMMMMMMMNNNND............. ....,DNMMMMMMMMMMMMMMMNDDD.............. ...DNNNNDMMMMMMMMMMMMMMNI...

script-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : copyright c James Coyle; JCcorp Expl : Remote Include File Dork : "copyright © James Coyle; JCcorp" ------------------------------------ B.File : createurl.php ------------------------------------ Exploit :...