4Images 1.7.7 - Filter Bypass HTML Injection / Cross-Site Scripting

|| || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: 4images = 1.7.7 - filter bypass HTML injection/XSS =INFO: =BUY: =DORK: -=/:Conditions:=- --------------------------------------------------------------------------------- ; Magic quotes...

CVE-2009-1937

Cross-site scripting XSS vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" aka flat and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the 1 commentname aka Author, 2 commentemail aka Email, and 3 commentmessage aka Comment parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" aka flat and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the 1 commentname aka Author, 2 commentemail aka Email, and 3 commentmessage aka Comment parameters...

CVE-2009-1937

LightNEasy is affected by an XSS vulnerability in its comment posting feature for versions 2.2.1 (no database/flat) and 2.2.2 SQLite. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) commentname, (2) commentemail, and (3) commentmessage parameters. The public r...

CVE-2009-1937: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" aka flat and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the 1 commentname aka Author, 2 commentemail aka Email, and 3 commentmessage aka Comment parameters...

CVE-2008-4530: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers...

ImageShack Toolbar 4.5.7 FileUploader Class Insecure Method PoC

No description provided by source. !-- ImageShack Toolbar 4.5.7 FileUploader Class ImageShackToolbar.dll insecure method poc This tool may allow a malicious web page to post arbitrary images on the web from a user hard drive. Images will be visible on ImageShack site, a way for an attacker to...

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod

ImageShack Toolbar 4.5.7 - FileUploader Class InsecureMethod suntzu.BuildSlideShow "file:///c:\xpwallpaperglass.jpg","Big",1,"uhuhinterestingprivatethings","Fade","White" suntzu.BuildSlideShow "file:///c:\boot.ini", "Big",1,"uhuhinterestingprivatethings...

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...

CVE-2002-2398: Undefined Security Weakness

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...

[Full-disclosure] H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF

I luv u Ms. Phisher u d4 d1am0nds 1n My Ski h4xorCrew Advirosy 5: Easynews PRO 4.0 XSS and CRSF =================================================== "the game of secuirity is like a sord fight you must think furst b4 you m0ve" H-4 h3r3 2 stay cuz we in da h0uz h4xorcewz n da house and r4w we g0nna...

Vizayn Urun Tanitim Sistemi 0.2 - 'tr' SQL Injection

/ Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Found by : ertuqrul PoC By : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...

Sql injection

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0554

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0554: Undefined Security Weakness

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

CVE-2006-3767

Cross-site scripting XSS vulnerability in showprofile.php in Darren's $5 Script Archive osDate 1.1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the onerror attribute in an HTML IMG tag with a non-existent source file in txtcomment parameter, which is used when...

Buddy Zone Version 1.0.1 - XSS

Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...

CVE-2006-3183

Cross-site scripting XSS vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, includi...

apnaspace.txt

Apnaspace.com A myspace type site for arab & indian teens Homepage: http://www.http://www.apnaspace.com Effected files: Comment input box: Posting a blog entry: - Entry title - Entry body Viewing a profile Posting a bulletin. Commenting on a picture Sending mail to someone...