Unfixed XSS vulnerability at www.naruto-arena.com

Security researcher Uber0n, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.naruto-arena.com, which at the time of submission ranked 7595 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is...

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

Mihalism Multi Host Download (Username) Blind SQL Injection Exploit

No description provided by source. ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to Kw3rln, Bankai, Slick,...

Mihalism Multi Host Download (Username) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Mihalism Multi Host Download Username Blind SQL Injection Exploit =================================================================== ?php / Mihalism Multi Host Download -...

CVE-2007-6517

SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...

Easily crack open the Lost Password laptop-vulnerability warning-the black bar safety net

For laptops, it is best not easily set a password, because the laptop's boot password is not like a PC that stored in CMOS circuit can through the discharge clear, at the moment a new laptop is the password stored on the motherboard of a few blocks of the logic circuit, our personal is not...

Easily crack open the Lost Password laptop-vulnerability warning-the black bar safety net

For laptops, it is best not easily set a password, because the laptop's boot password is not like a PC that stored in CMOS circuit can through the discharge clear, at the moment a new laptop is the password stored on the motherboard of the few pieces of logic circuits, we personally are unable to...

With Phoenix universal boot disk to resolve local/domain administrator password lost-vulnerability warning-the black bar safety net

The local administrator password is lost, by deleting the SAM file, or by NTPASSWORD software solution. But to solve the domain administrator password is lost, they can not do anything. Then you need to use“Phoenix universal boot disk”, this article will discuss in detail the use of this disk to...

CVE-2006-0633

The makepassword function in ipsclass.php in Invision Power Board IPB 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost password, which might make it easier for remote attackers to guess the code and...

Easily exploitable Pseudo Random Number generator in phpbb version 2.0.19 and under.

I. DESCRIPTION Easily exploitable Pseudo Random Number generator in phpbb version 2.0.19 and under. II. DETAILS Due to poor design the genrandstring can only generate upto 1 million hashes or random strings. This allow an attacker to reset any account through the lost password request form by...

fr-dyn0.txt

FriendsReunited.co.uk - XSS hole -------------------------------- Desc: Theres' a XSS hole in FriendsReunited Risk: Medium to High can be used to include malicious code Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Site blurb : So FriendsReunited is one of those places where...

CVE-2005-2431

The 1 lost password and 2 account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses aka mail bomb...

CSS in PHP WEB CHAT

Product: PHP WEB CHAT Version: 2.0 OffSite: http://www.webscriptworld.com Problem: Cross Site Scripting -------------------------------------------- Actions: 1Register http://victim/chatdir/register.php?register=yes&username=OverG&email=scrptalert20"Test!"/scrpt&email1=scrptalert20"Test!"/scrpt 2...