Small conference Baidu post bar title XSS vulnerabilities [Fixed]-bug warning-the black bar safety net

Source: 80sex The first reference to http://www. 80sec. com/charset-xss. html.：） This vulnerability in different browsers on the performance of the out the effects of each different, in GBKXX coding the next FF will recognize this illegal character put it when half the width of the byte and a...

Yahoo! 统计功能跨站脚本漏洞

yahoo统计功能被广泛用于站点的访问统计，用于做各种数据分析如访问来源，客户访问页面统计等等，具体信息可以访问网址 http://tongjia.yahoo.cn。但是80sec发现该功能存在严重的漏洞，可能导致用户信息被窃取，并且可以占有该用户的yahoo ID，进入包括mail.yahoo.cn之内的其他服务。 yahoo统计功能在获得用户提交的参数时缺少必要的过滤，导致恶意用户可以提交精心构造的数据进入控制面板后台，譬如访问地址信息就会不加过滤地进入后...

e107 Plugin My_Gallery 2.3 Arbitrary File Download Vulnerability

No description provided by source. e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3...

e107 Plugin My_Gallery 2.3 Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications ================================================================ e107 Plugin MyGallery 2.3 Arbitrary File Download Vulnerability ================================================================ e107 MyGallery Plugin Arbitrary File Download...

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 Link:...

e107 My_Gallery Plugin Arbitrary File Download Vulnerability

e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software: MyGallery v2.3 plugin for e107 and prior Link:...

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

e107 Plugin MyGallery 2.3 - Arbitrary File Download e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software:...

CVE-2008-0385

SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the connectionId parameter to index.php with 1 statprt/js/request or 2 dyn/js/request in the PATHINFO...

CVE-2008-0124

Cross-site scripting XSS vulnerability in Serendipity S9Y before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via 1 the "Real name" field in Personal Settings, which is presented to readers of articles; or 2 a file upload, as demonstrated by a .htm, .html, or...

[Full-disclosure] MyNews 1.6.X HTML/JS Injection Vulnerability

I know its basic, but I am a supporter of FD and therefore planetluc.com has to be blamed now! I checked their script MyNews in version 1.6.4 today and then some other versions, all are vulnerable to HTML and JS injection. --- ADVISORY --- ---------------------------- || WWW.SMASH-THE-STACK.NET |...

planetluc-xss.txt

I know its basic, but I am a supporter of FD and therefore planetluc.com has to be blamed now! I checked their script MyNews in version 1.6.4 today and then some other versions, all are vulnerable to HTML and JS injection. --- ADVISORY --- ---------------------------- || WWW.SMASH-THE-STACK.NET |...

Invision Power Board <= 2.1.7 ACTIVE XSS/SQL Injection Exploit

No description provided by source. ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / &nbs...

MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com...

Invision Power Board (IP.Board) 2.1.7 - 'ACTIVE' Cross-Site Scripting / SQL Injection

---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 ////...

HP notebooks remote code execution vulnerability (multiple series)

Advisory: ///////// Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access. Overview: ///////// Software called "HP Info...

HP Compaq Notebooks - ActiveX Remote Code Execution

HP Compaq Notebooks - ActiveX Remote Code Execution !- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access...

[Full-disclosure] SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: SF-Shoutbox 1.2.1 = 1.4 HTML/JS Injection Vulnerability || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: GOOGLE DORK || 0x05: RISK LEVEL || 0x00: ABOUT ME...

Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX任意文件上传漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞下载任意程序在用户系统上以当前用户上下文权限运行。 问题存在于ThunderServer.webThunder.1,可以采用JS代码ActiveXObject"ThunderServer.webThunder.1";来激活讯雷的组件。 其中的关键函数包括: SetBrowserWindowData:新建浏览器窗口. SetConfig:设置WEB讯雷. HideBrowserWindow:隐藏浏览器...

Hung it to the way and the system determines whether the code-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

CVE-2007-2285

Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...