1Book Guestbook Script 1.0.1 - Code Execution

========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org & no-exploit.com Script : 1Book Guestbook Script Bug : remo...

1Book Guestbook Script Code Execution Vulnerability

Exploit for unknown platform in category web applications =================================================== 1Book Guestbook Script Code Execution Vulnerability =================================================== ========================================================= =============== JIKI TEAM...

CVE-2007-3156: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...

mybb-sql-115.php.txt

!/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB" "2006 MyBB Group"\n\n"; / works...

CVE-2006-1438

The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416: Undefined Security Weakness

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

Mini-Nuke<=1.8.2 SQL injection (6)

//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...

security flaw

Multiple off-by-one errors in the cURL library libcurl 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that 1 are malformed in a way that prevents a terminating null byte from being added to...

UltimatePHPBoard.txt

Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB is a...

Novell eDirectory NMAS unauthorized access

Forgotten password recovery option allows to recover password without answering secret question...

CVE-2005-2011

Multiple cross-site scripting XSS vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action...

CVE-2005-2011

Multiple cross-site scripting XSS vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action...

CVE-2005-2011: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action...

xoops Quizz Module IMG bug

Author: Magistrat http://www.blocus-zone.com magistrat@blocus-zone com Date: 11/11/2002 Object: IMG bug in quizz module risk: Medium-high advisory url: http://www.blocus-zone.com/modules/news/article.php?storyid=180 ----------------------------------------------------- After having highlighted wi...