Unfixed XSS vulnerability at www.a1webhosting.ph

Security researcher SeeD, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting www.a1webhosting.ph, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is currently...

Unfixed XSS vulnerability at www.the-combine.net

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.the-combine.net, which at the time of submission ranked 996301 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

CVE-2007-1957

Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in 1 template/Vert/, or 2 template/Noir/...

CVE-2006-6568

Directory traversal vulnerability in includes/kbconstants.php in the Knowledge Base mxkb 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. dot dot sequence in the phpEx parameter...

CVE-2006-3680

Cross-site scripting XSS vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web script or HTML via the phpage parameter...

CVE-2004-1863

Multiple cross-site scripting XSS vulnerabilities in XMB aka extreme message board 1.9 beta aka Nexus beta allow remote attackers to inject arbitrary web script or HTML via 1 the u2uheader parameter in editprofile.php, the restrict parameter in 2 member.php, 3 misc.php, and 4 today.php, and 5 an...