Pyrophobia 2.1.3.1 modules/out.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues to steal cookie-base...

WordPress Plugin AdRotate 3.6.6 - SQL Injection

WordPress Plugin AdRotate 3.6.6 - SQL Injection Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" encoded=echo -n "1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" | base64 -w 0 curl...

CVE-2008-2869: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Link ADS 1 (out.php linkid) Remote SQL Injection Vulnerability

No description provided by source. Link ADS 1 SQL Injection Vulnerability ======================================================== Author: Hussin X Home : www.tryag.cc/cc email: darkangel...

Link ADS 1 - linkid SQL Injection

Link ADS 1 - linkid SQL Injection Link ADS 1 SQL Injection Vulnerability ======================================================== Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom ======================================================== HomE script :...

Link ADS 1 - 'linkid' SQL Injection

Link ADS 1 SQL Injection Vulnerability ======================================================== Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom ======================================================== HomE script : http://e-topbiz.com/ Demo :...

Cross site scripting

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2787

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2787: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2536: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting AIH Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter...

CVE-2003-1409: Exposure of Sensitive Information to an Unauthorized Actor

TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to 1 in.php or 2 out.php, which reveals the path to the TOPo directory in the error message...

CVE-2007-1159

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1159: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1159

Cross-site scripting XSS vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-1506: Undefined Security Weakness

SQL injection vulnerability in out.php in CJ Ultra CJUltra Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter...

CJ Ultra Plus 1.0.31.0.4 - OUT.php SQL Injection

CJ Ultra Plus 1.0.31.0.4 - OUT.php SQL Injection source: https://www.securityfocus.com/bid/13533/info CJ Ultra Plus is prone to an SQL injection vulnerability. This issue affects the 'out.php' script and could permit remote attackers to pass malicious input to database queries, resulting in...

CJ Ultra Plus 1.0.3/1.0.4 - 'OUT.php' SQL Injection

source: https://www.securityfocus.com/bid/13533/info CJ Ultra Plus is prone to an SQL injection vulnerability. This issue affects the 'out.php' script and could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks...