CVE-2010-3070

Cross-site scripting XSS vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to an arbitrary PHP script that uses NuSOAP classes...

WAnewsletter v 2.1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-D...

Horde util/icon_browser.php subdir Parameter XSS

The version of the Horde application framework hosted on the remote web server fails to sanitize user input to the 'subdir' parameter of the 'util/iconbrowser.php' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or...

GuestBookPlus HTML Injection / Comment Bypass

======================================================================= In the name of ALLAH ! ======================================================================= GuestBookPlus Script PHP HTML Injection Vuln. =======================================================================...

GuestBookPlus HTML Injection & Bypass Comments Limit

Exploit for php platform in category web applications ==================================================== GuestBookPlus HTML Injection & Bypass Comments Limit ==================================================== ======================================================================= In the name ...

NavanaSoft Auth Bypass vulnerability

Exploit for php platform in category web applications ==================================== NavanaSoft Auth Bypass vulnerability ==================================== ? My home: HacKTeach.org & Pal-Li0ns.com & sec-r1z.com ? For Ask: email protected ? Script: NavanaSoft ? home Script NavanaSoft.com ...

Freelancers Marketplace Script Cross Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla Front-End Article Manager System Upload Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Front-End Article Manager System Upload Vulnerability ============================================================...

How to Run a Scareware Campaign

The infection routines being used by some scareware and rogue AV gangs are much more comprehensive and far-reaching than many current analyses have shown, experts say, including some attacks that not only place a malicious script on a compromised server, but infect every single legitimate script ...

iNetsolution Jobsearch Engine SQL Injection

================================================== i-netsolution jobsearch Engine SQLi Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

Scareware, Black Hat SEO and You

The scareware and rogue AV problem that initially appeared a few years ago and has since found its way onto thousands and thousands of legitimate Web sites, including The New York Times home page, has now reached epidemic levels. The scams are mostly boilerplate and well-understood, but it’s not...

i-netsolution Job Search Engine - SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

i-netsolution Job Search Engine - SQL Injection

i-netsolution Job Search Engine - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi special...

Online Classified System Script - SQL Injection / Cross-Site Scripting

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Online Classified System Script SQLi and XSS Vulnerable Vendor url:http://www.2daybiz.com/ Version:1...

Online Classified System Script - SQL Injection Cross-Site Scripting

Online Classified System Script - SQL Injection Cross-Site Scripting 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Online Classified System Script...

Social Community Script Authentication Bypass

Exploit for php platform in category web applications ============================================= Social Community Script Authentication Bypass ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

2DayBiz Online Classified System - SQL Injection Cross-Site Scripting

2DayBiz Online Classified System - SQL Injection Cross-Site Scripting Name : 2daybiz online classified system SQLi AND XSS Vulnerability Date : june, 16 2010 Vendor url :http://www.2daybiz.com/onlineclassifiedscript.html Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to :...

2daybiz online classified system SQL Injection / XSS Vulnerability

Exploit for php platform in category web applications ================================================================== 2daybiz online classified system SQL Injection / XSS Vulnerability ==================================================================...

Daily Calorie Counter SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Daily Calorie Counter SQL Injection Vulnerability ================================================= Author: L0rd CrusAd3r aka VSN email protected Exploit Title:Daily Calorie Counter SQL Injecti...

iRealty PHP Real Estate Script SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: iRealty PHP Real Estate Script PHP Script SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.worksforweb.com Greetz to:Sid3^effects, MaYur, M4n0j and to all ICW members DESCRIPTION: iRealty Real Estate Script is a...