9 matches found
EUVD-2007-1899
Malware in sbrugna...
QuizShock <= 1.6.1 Auth.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the...
QuizShock v1.5.5 XSS Vulnerability
No description provided by source. ======================================================================================== | Title : QuizShock 1.5.5 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
CVE-2007-1905
Cross-site scripting XSS vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forwardto parameter, as demonstrated using """...
Cross site scripting
Cross-site scripting XSS vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forwardto parameter, as demonstrated using """...
CVE-2007-1905
CVE-2007-1905 is a cross-site scripting (XSS) vulnerability in Pineapple Technologies QuizShock 1.6.1 and earlier, occurring in auth.php. The issue allows remote attackers to inject arbitrary scripts/HTML by supplying encoded characters in the forward_to parameter (example: "<"
quizshock-xss.txt
QuizShock 1.6.1 Cross-Site Scripting Vulnerability QuizShock 1.6.1 Cross-Site Scripting Vulnerabilitydiscovered by John Martinelli alert551660661;"...
QuizShock 1.6.1 - auth.php HTML Injection
QuizShock 1.6.1 - auth.php HTML Injection source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the contex...
QuizShock 1.6.1 - 'auth.php' HTML Injection
source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowi...