Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...

CVE-2008-4742: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...

LightBlog 9.8 (GET POST COOKIE) Multiple LFI Vulnerabilities

No description provided by source. LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was...

LightBlog 9.8 - GET POST COOKIE Local File Inclusion

LightBlog 9.8 - GET POST COOKIE Local File Inclusion LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team -...

LightBlog 9.8 - 'GET' / 'POST' / 'COOKIE' Local File Inclusion

LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it...

CVE-2008-4590: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

zomplog39-xss.txt

Greetings to --d3hydr8 -r45c4l -baltazar -sinner01 -C1c4Tr1Z - Gabitzu and all darkc0de members ; Author: swappie aka faithlove Email : [email protected] Do researching and share! ; Title: ZompLog 3.9 beta CMS Link: http://www.zomp.nl/user-content/downloads/zomplog/zomplog3.9-beta.zip...

CVE-2008-4523

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4523

CVE-2008-4523 describes a SQL injection in login.php for IP Reg 0.4 and earlier, exploitable via the user_name parameter to run arbitrary SQL commands remotely. The vulnerability is evidenced in multiple sources (NVD, CVE listings, and related references) with a CVSS v2 base score of 7.5 (HIGH) a...

CVE-2008-4523

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4523: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3063

The CVE-2008-3063 entry documents a SQL injection vulnerability in V-webmail 1.5.0’s login.php, exploitable via the username parameter to allow remote execution of arbitrary SQL commands. Affected software: V-webmail 1.5.0 (login.php). Root cause: unsafely concatenated user input in the login rou...

CVE-2008-3063: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4120: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 pass parameter to login.php, or the 3 name parameter to contact.php...

CVE-2008-4081: Improper Authentication

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2008-4056

CVE-2008-4056 describes a Cross-site scripting (XSS) vulnerability in the admin/login.php of Matterdaddy Market 1.1 . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Multiple connected sources corroborate the description. The NVD entry lists a CVSSv...

CVE-2008-4056: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/login.php in Matterdaddy Market 1.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3664: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via 1 the real name field, related to the user list; 2 the target parameter to login.php, 3 the title parameter to activities/some.php, 4 the companyname parameter to...

XRms 1.99.2 - 'login.php?target' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to...