EV0028.txt

New eVuln Advisory: Wordcircle Multiple SQL Injection & XSS Vulnerabilities --------------------Summary---------------- Software: Wordcircle Sowtware's Web Site: http://www.wordcircle.org/ Versions: 2.17 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched...

Tolva PHP website system Remote File Include

Script: Tolva PHP website system Version: 0.1.0 Language: PHP Official Website: http://sourceforge.net/projects/twebs Problem: Remote File Include Discovered by: beford Description: ============ A complete collection of php scripts that work tightly together to create a highly customizable, dynam...

athena.txt

Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...

qnx-inputtrap.txt

rfdslabs security advisory Title: QNX inputtrap arbitrary file read vulnerability RLSA01-2005 Versions: QNX RTOS 6.3, 6.1.0 possibly others Vendor: http://www.qnx.com Date: Feb 22 2005 Author: Julio Cesar Fort 1. Introduction inputtrap is a utility designed to detect and start input manager in QN...

ZipTorrent1.3.7.3.txt

/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...

comersusXSSsql.txt

Spread The Word comersus based bookstore multiple script and variables XSS and SQL Injections vulnerabilities. vendor url:http://www.stwm.com/opportunity.asp advisore url:http://lostmon.blogspot.com/2005/05/ spread-word-multiple-xss-and-sql.html vendor notified:yes exploit available: yes Spread T...

dvbbsXSS.txt

DVBBS Multiple variable Cross site scripting vendor url:http://down.dvbbs.net/ SoftView/SoftView2455.html Advisory:http://lostmon.blogspot.com/2005/08/ dvbbs-multiple-variable-cross-site.html vendor notify:yes exploit available:yes OSVDB ID:18512 DVBBS contains a flaw that allows a remote cross...

cleverNotSo.txt

Clever copy Path disclosure and multiple XSS vendor url:http://clevercopy.bestdirectbuy.com advisory:http://lostmon.blogspot.com/2005/07/ clever-copy-path-disclosure-and-xss.html vendor notify: yes exploit available:yes Clever Copy is a free, fully scalable web site portal and news posting...

Echo Security Advisory 2005.18

--------------------------------------------------------------------------- ECHOADV18$2005 Multiple SQL INJECTION in Ublog Reload 1.0.5 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 20th 2005 Location: Indonesia, Jakarta Web:...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

Skull-Splitter Guestbook Multiple Field XSS

The remote version of this software is vulnerable to cross-site scripting attacks. Inserting special characters into the subject or message content can cause arbitrary script code execution for third-party users, thus resulting in a loss of integrity of their system. %NASLMINLEVEL 70300 This scri...

[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)

SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...

XSS Vulnerability in Siteman v1.1.9

New XSS Vulnerability in Siteman v1.1.9, Discovered by PersianHacker.NET Security Team by Pi3cH pi3ch yahoo com http://www.PersianHacker.NET Siteman is a Content Management System CMS that is so easy to install and use, that a person who has no knowledge about creating homepages can get a...

CoolPHP 1.0 Multiple Vulnerabilities

The remote host is running the CoolPHP Content Management system. There are various flaws in the remote version of this software which may allow an attacker to read arbitrary files on the remote host or to set up a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

New XSS vulnerabilities in paFileDB 3.1 final

Another XSS Vulnerability has been found in paFileDB! paFileDB is designed to allow webmasters have a database of files for download on their site. Vulnerable: Software: email & category & file paFileDB modules Just Tested on: paFileDB 3.1 Final , but likely works on another versions. Exploit:...

SQL-Injection in Subjects 2.0 for Postnuke

CRIOLABS - Software: Subjects 2.0 - Type: Postnuke module - Vendor: Postnuke Modules Factory. Software Software: Subjects Postnuke module Version: 2.0 Plataforms: Unix/Win/PHP/MySQL/Postnuke Web: http://home.postnuke.ru Vendor Description Module is designed for structured store & display text...

Compaq Web-Based Management Agent Remote Overflow DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. This flaw could be used to forbid managing machines. C Tenable Network Security, Inc. References: Message-ID: Date: Thu, 19 Jun 2003 00:05:14 +0200 CEST From:...

Vulnerabilitiy in Drag and Zip

=================================== - Product: Drag and Zip - Version: 3.0 - Offsite: http://www.canyonsw.com - Authors: Canyon Software - Problem: Buffer Overflow =================================== General Description Найденная мною уязвимость в этом продукте, не представляет большой опастности...

Beanwebb's Guestbook 1.0 Multiple Vulnerabilities

The remote host is running Beanwebb's Guestbook. This set of CGIs has two vulnerabilities : - Anyone can access the admin page admin.php - It is vulnerable to cross-site scripting attacks in add.php An attacker may use these flaws to steal the cookies of your users or to inject fake information i...

WebChat XSS

The remote host is vulnerable to a cross-site scripting attack through its web chat module : - An attacker may create a new user with a bogus email address containing JavaScript code - Then the profile of the newly created user or the 'lost password' page for this user will display the unprocesse...