2603 matches found
Unfixed XSS vulnerability at www.blackhumor.gr
Security researcher St@R-gaZ3r, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.blackhumor.gr, which at the time of submission ranked 90663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Cabron Connector 1.1.0-Full - Remote File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=- Cabron Connector v1.1.0 -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author : Dj7xpl / Dj7xplatYahoodotcom Type : Remote File Inclusion Vuln Download: http://cabron.sourceforge.net Vuln:...
battlenet-sql.txt
script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass'; ..... ..... ..... line 21--...
PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability
No description provided by source. +========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom &nbs...
Battle.net Clan Script for PHP 1.5.1 - SQL Injection
Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...
CYBSEC Release: SAP Security - Paper & Tool release
I am proud to announce the release of a White-paper and an open-source tool, both addressing security of SAP R/3 systems. The paper describes vulnerabilities discovered in the SAP RFC interface implementation and library, as well as some attacks that can be performed over SAP systems. The tool,...
Unfixed XSS vulnerability at www.webhost4life.com
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.webhost4life.com, which at the time of submission ranked 16660 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.truckworld.pl
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.truckworld.pl, which at the time of submission ranked 2014416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.equipmenttrader.nl
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.equipmenttrader.nl, which at the time of submission ranked 5125603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It...
Unfixed XSS vulnerability at direct.formas.se
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting direct.formas.se, which at the time of submission ranked 2378829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Fixed XSS vulnerability at homer.med.ualberta.ca
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting homer.med.ualberta.ca, which at the time of submission ranked 6255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.trucks-de.eu
Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.trucks-de.eu, which at the time of submission ranked 977389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
CVE-2007-1192
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...
CVE-2007-1192
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...
CVE-2007-1192
CVE-2007-1192 affects HyperBook Guestbook 1.30. The issue is improper access control: sensitive data is stored under the web root, enabling a remote attacker to directly download the admin password hash from data/gbconfiguration.dat. This constraint is evidenced across multiple sources in the con...
Unfixed XSS vulnerability at www.w-hotspots.gr
Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.papasotiriou.gr
Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.papasotiriou.gr, which at the time of submission ranked 50005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Buffer overflow
Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...