Unfixed XSS vulnerability at www.online.uitm.edu.my

Security researcher p0pc0rn, has submitted on 29/07/2011 a cross-site-scripting XSS vulnerability affecting www.online.uitm.edu.my, which at the time of submission ranked 18731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...

Unfixed XSS vulnerability at webcoils.dcssrl.it

Security researcher p0pc0rn, has submitted on 07/12/2011 a cross-site-scripting XSS vulnerability affecting webcoils.dcssrl.it, which at the time of submission ranked 317069 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/12/2011. It is...

Unfixed XSS vulnerability at www.math.upenn.edu

Security researcher p0pc0rn, has submitted on 07/01/2011 a cross-site-scripting XSS vulnerability affecting www.math.upenn.edu, which at the time of submission ranked 2647 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at narademo.umiacs.umd.edu

Security researcher p0pc0rn, has submitted on 07/01/2011 a cross-site-scripting XSS vulnerability affecting narademo.umiacs.umd.edu, which at the time of submission ranked 6003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at www.press.uchicago.edu

Security researcher p0pc0rn, has submitted on 07/01/2011 a cross-site-scripting XSS vulnerability affecting www.press.uchicago.edu, which at the time of submission ranked 6447 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at waatp.com

Security researcher p0pc0rn, has submitted on 07/01/2011 a cross-site-scripting XSS vulnerability affecting waatp.com, which at the time of submission ranked 131423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Acuity CMS Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : Acuity CMS Vulnerable to Blind SQL Injection Found by : p0pc0rn Dork : intext:"Powered by Acuity CMS." Web : http://www.acuitycms.com/ SQL Injection ---------------- http://www.site.com/browse.asp?page=Blind SQL POC ----...

Unfixed XSS vulnerability at student.cuny.edu

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting student.cuny.edu, which at the time of submission ranked 4202 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currentl...

Unfixed XSS vulnerability at digicoll.library.wisc.edu

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting digicoll.library.wisc.edu, which at the time of submission ranked 3509 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at rulai.cshl.edu

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting rulai.cshl.edu, which at the time of submission ranked 177148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currentl...

Unfixed XSS vulnerability at dsal.uchicago.edu

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting dsal.uchicago.edu, which at the time of submission ranked 6447 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is current...

Unfixed XSS vulnerability at zsrep.sourceforge.net

Security researcher p0pc0rn, has submitted on 05/01/2011 a cross-site-scripting XSS vulnerability affecting zsrep.sourceforge.net, which at the time of submission ranked 153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Inventory Mojo Software Vulnerable to Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Inventory Mojo Software Vulnerable to Multiple SQL Injections Found by : p0pc0rn Dork : intext:"Powered by Inventory Mojo Software." SQL --- Vulnerable Parameters are Method = GET ------------ categoria.asp producto.asp srubro.asp...

CAPSoft CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Title : CAPSoft CMS Multiple Vulnerabilities Vendor : http://www.capsoft.com.ar Found by : p0pc0rn SQL --- Vulnerable Parameters are Method = GET ------------ http://site.com/noticia.asp?id=SQL...

Shimbi CMS SQL Injection

Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:"Powered By Shimbi CMS" SQL Injection in details.php parameter --------------------------------------- http://site.com/details.php?id=sql POC ---...

VoiceCMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : VoiceCMS Vulnerable to SQL Injection Vendor : http://www.voicecms.ca Found by : p0pc0rn Dork : intext:"Powered by VoiceCMS" SQL - Jet Engine Database Error ------------------------------- Parameter...

Triware CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : Triware CMS Vulnerable to Multiple SQL Injection Vendor : http://www.triware.ca/ Found by : p0pc0rn Dork : intext:"Site by Triware Technologies Inc" SQL - Jet Engine Database Error ------------------------------- Parameter...

Stanmax Interactive Studio CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Stanmax Interactive Studio CMS Vulnerable to SQL Injection Vendor : http://www.stanmax.com.my/ Found by : p0pc0rn Dork : intext:"Site Powered By Stanmax Interactive Studio" SQL ---- http://site.com/index.php?p=newsdetails&annid=SQL...

Luch Web Designer - Multiple SQL Injections

Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 union select 1 from test.a...

Web Design by Webz SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : Web Design by Webz Vulnerable to SQL Injection Web : http://www.webz.com.my/ Found by: p0pc0rn 08/03/2011 Dork : intext:"Web Design by Webz" filetype:asp SQL - Microsoft JET Database Engine error...