Unfixed XSS vulnerability at www.celtic-sheepskin.co.uk

Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.celtic-sheepskin.co.uk, which at the time of submission ranked 372868 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007...

Unfixed XSS vulnerability at www.froer.nu

Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.froer.nu, which at the time of submission ranked 3527124 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Unfixed XSS vulnerability at www.areyougame.com

Security researcher Persian Fox, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.areyougame.com, which at the time of submission ranked 146881 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/12/2007. It is...

phplive-rfi.txt

Aria-Security Team http://Aria-Security.Net Persian Security Network Source Code: Affected file: Index.php Poc: /index.php?DOCUMENT...

OSI CODES - PHP Live! Remote File Inclusion

Aria-Security Team http://Aria-Security.Net Persian Security Network Source Code: ? / COPYRIGHT OSI CODES - PHP Live! / sessionstart ; $l = "" ; // try to get cookie value first if isset $HTTPCOOKIEVARS'COOKIEPHPLIVESITE' $l = $HTTPCOOKIEVARS'COOKIEPHPLIVESITE' ; if isset $HTTPGETVARS'l' $l =...

Unfixed XSS vulnerability at efeh.ir

Security researcher Persian Fox, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting efeh.ir, which at the time of submission ranked 843927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

Unfixed XSS vulnerability at www.azmoon.net

Security researcher Persian Fox, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.azmoon.net, which at the time of submission ranked 10286 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

commute-xss.txt

Aria-Security Tilte: community Cross-site Scripting XSS proof Of Concept : local/path/require/smallhead.php?retun=Xss-script...

Microsoft Windows Explorer - '.GIF' Image Denial of Service

!/usr/bin/perl Bug Found By ::DeltahackingTEAM Coded By Reza.Yavari Dr.Pantagon Web Site::Www.Deltahacking.net And Www.DeltaSecurity.ir And Www.PersianWhois.com Free Upload :: Www.Persianupload.com And Www.Persianupload.net Email: Dr.Pantagon ADeltasecurity.ir We...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

Joomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion

Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in Joomla 1.5.0 Beta : File /libraries/pcl/pcltar.php, Lin...

Joomla! 1.5.0 Beta - pcltar.php Remote File Inclusion

Joomla! 1.5.0 Beta - pcltar.php Remote File Inclusion Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in...

joomla150beta-sql.txt

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...

aria-dudown.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=60 ----------------------------------------------------------- Software: DuDownload Method: SQL Injection Vendor: http://duware.com PoC: http://target/type.asp?iType=SQL Injection...

aria-uphoto.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: uPhotoGallery 1.1 Method: SQL injection PoC: http://target/slideshow.asp?imgid=290&ci=SQL Injection http://target/thumbnails.asp?ci=SQL Injection Contact: [email protected]...

aria-clickcontact.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Contact Method: SQL injection PoC: http://target/default.asp?view=alpha&AlphaSort=SQL Injection http://target/default.asp?In=SQL INJECTION http://target/default.asp?view=All&orderby=SQL Injecti...

aria-inews.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=40 ----------------------- ------------------------------------ Software: iNews News Manager Method: SQL Injection PoC: http://target/path/articles.asp?ex=XSS Contact: [email protected]...

A-Cart 2.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=31 ----------------------------------------------------------- Software: A-Cart 2.0 Vendor: http://alanward.net/acart/ Method: SQL...