CVE-2010-5064

Multiple cross-site scripting XSS vulnerabilities in Virtual War aka VWar 1.6.1 R2 allow remote attackers to inject arbitrary web script or HTML via 1 the Additional Information field to challenge.php, the 2 Additional Information or 3 Contact information field to joinus.php, 4 the War Report fie...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Virtual War aka VWar 1.6.1 R2 allow remote attackers to inject arbitrary web script or HTML via 1 the Additional Information field to challenge.php, the 2 Additional Information or 3 Contact information field to joinus.php, 4 the War Report fie...

CVE-2010-5064

Multiple cross-site scripting XSS vulnerabilities in Virtual War aka VWar 1.6.1 R2 allow remote attackers to inject arbitrary web script or HTML via 1 the Additional Information field to challenge.php, the 2 Additional Information or 3 Contact information field to joinus.php, 4 the War Report fie...

2daybiz Multi Level Marketing SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

FCMS 2.7.2 Cross Site Scripting

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Sql injection

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4983

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-3371

Multiple cross-site scripting XSS vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 formsent, 3 csrftoken, 4 reqconfirm, or 5 delete parameter to delete.php, the 6 id, 7 formsent, 8 csrftoken, 9 reqmessage,...

G2webCMS SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability G2webCMS products.php?catid member-profile.php?profile AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.g2web.com/ Persian Gulf 4 Ever! Dork : "Powered by G2webCMS"...

Mafia Game Script SQL injection Vulnerability

Exploit for php platform in category web applications +Name : WebScript Mafia Game Script profile.php www.cyber-warrior.org +Greetz to All System-Hacker, BlackApple , F0RTYS3V3N and All KinqSqlZCrew Members ---------------------------------------------------------------------------------------...

Blogman v0.7.1 (profile.php) SQL Injection Exploit

Exploit for php platform in category web applications ================================================== Blogman v0.7.1 profile.php SQL Injection Exploit ================================================== !/usr/bin/python Exploit Title: Blogman v0.7.1 profile.php SQL Injection Exploit Date : 28...

Blogman 0.7.1 - profile.php SQL Injection

Blogman 0.7.1 - profile.php SQL Injection !/usr/bin/python Exploit Title: Blogman v0.7.1 profile.php SQL Injection Exploit Date : 28 August 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/blogman/ Version :...

CVE-2009-4944

Multiple cross-site scripting XSS vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 address parameter to profile.php or the 2 description parameter to events/addevent.php. NOTE: the provenance of this information is unknown; the details ar...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATRC ACollab 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 address parameter to profile.php or the 2 description parameter to events/addevent.php. NOTE: the provenance of this information is unknown; the details ar...

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability

Exploit for php platform in category web applications ============================================================== PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability ==============================================================...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

phpBB MOD 2.0.19 - Invitation Only PassCode Bypass PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | |...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| ||| || ||,|||\|||...

iScripts CyberMatch 1.0 - Blind SQL Injection

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-02-07 X. INDEX I. ABOUT THE...

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability ========================================================= iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScrip...