PHP AGTC-Membership system <= v1.1a XSS

PHP AGTC-Membership system = v1.1a XSS Discovered by: Nomenumbra Date: 23/5/2006 impact:moderate privilege escalation,possible defacement Ordinary users can add users to the user management system as well, or change their own email address, which isn't properly sanitized, thus allowing XSS as...

Chatty improper input sanitizing

Chatty improper input sanitizing Discovered by: Nomenumbra Date: 21/5/2006 impact:moderate possible defacement Chatty is a PHP-based chatscript allowing users to chat over the web. Subscribing with a username like this: scriptalert22xss22/script would cause major xss in the chatroom. Nomenumbra...

VisionSource CMS <= 0.6 XSS vectors

VisionSource CMS = 0.6 XSS vectors Discovered by: Nomenumbra Date: 5/4/2006 impact:moderate privilege escalation,possible defacement No data inside the user's profile is filtered thus allowing them to embed malicious XSS vectors to potentially steal cookies. Nomenumbra/0x4F4C...

SF-Users V1.0 XSS injection

SF-Users V1.0 XSS injection Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement The username with which you sign up isn't properly sanitized so it's possible to insert some javascript there. The single quote is filtered so we'll have to use ' or 27. A...