mpsw-rfi.txt

magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...

Phorum 3.2.11 - common.php Remote File Inclusion

Phorum 3.2.11 - common.php Remote File Inclusion =========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html...

Phorum 3.2.11 - 'common.php' Remote File Inclusion

=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...

Macromedia Flash 9 - IE Plugin Remote Crash (Denial of Service)

Macromedia Flash 9 - IE Plugin Remote Crash Denial of Service / Macromedia flash crash Bug discovered by Mr.Niega http://www.swerat.com/ Affected Software: Flash 9 Ie Plugin Impact: Crash Solution Status: Unpatched E-Mail: [email protected] Credits goes out to MarjinZ /| //| | /| //| | //| // | |...

interlink.txt

========================== Discovery By: Mr-X Site: www.alshmokh.com E-mail: [email protected] ========================== Example: /newsinformation.php?id=12&flag=XSS...

livehelper.txt

================== Credit: Mr-X Site: www.alshmokh.com Email: [email protected] ================== Example:- /chat.php?action=showmain&PHPSESSID=XSS...

RaceEventManagement <--v0.7.6 SQL injection & XSS

============================ Discovery By: Mr-X Site: www.alshmokh.com E-mail: [email protected] =========================== Example: /nennung.php?pid=SQL /nennung.php?pid=XSS...

modules name(Sections)SQL Injection Exploit

By: Mr-X Email: [email protected] Subject: modules nameSectionsSQL Injection example:- /modules.php?name=Surveys&op=results&pollID=8&mode=&order=&thold=SQL...

vbzoomv1.11.txt

Software: vbzoom v1.11 Web Site:http://www.vbzoom.com Versions: V1.11 == SQL Injection == http://www.victem.com/vz/show.php?UserID=1&MainID=1&SubjectID=SQL http://www.victem.com/vz/show.php?UserID=1&MainID=SQL&SubjectID=1 ==== XSS ==== http://www.victem.com/vz/comment.php?UserID='XSS...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2005-4041

CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...