Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

PT-2012-3019

Name of the Vulnerable Software and Affected Versions NexorONE Online Banking affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerable...

CVE-2012-0900

Multiple cross-site scripting XSS vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 forum/register.php or 2 forum/logon.php...

PT-2012-2934

Name of the Vulnerable Software and Affected Versions Beehive Forum version 1.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved by manipulating the PATH INFO to specific API endpoints, such as "forum/register.php" or "forum/logon.php"...

CVE-2012-0900: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Beehive Forum 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 forum/register.php or 2 forum/logon.php...

CVE-2011-3371

Multiple cross-site scripting XSS vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 formsent, 3 csrftoken, 4 reqconfirm, or 5 delete parameter to delete.php, the 6 id, 7 formsent, 8 csrftoken, 9 reqmessage,...

CVE-2011-3371: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 formsent, 3 csrftoken, 4 reqconfirm, or 5 delete parameter to delete.php, the 6 id, 7 formsent, 8 csrftoken, 9 reqmessage,...

PT-2011-4700

Name of the Vulnerable Software and Affected Versions TinyWebGallery TWG version 1.8.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing the i frames/i register.php file, which reveals the...

RunCMS 2.2.2 - register.php SQL Injection

RunCMS 2.2.2 - register.php SQL Injection source: https://www.securityfocus.com/bid/46342/info RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Gazelle CMS - Multiple Vulnerabilities

Gazelle CMS - Multiple Vulnerabilities Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: www.anantasoft.com Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Version: AnantaGazelle1...

Unfixed XSS vulnerability at welt1.freewar.de

Security researcher Viper.aT, has submitted on 15/07/2010 a cross-site-scripting XSS vulnerability affecting welt1.freewar.de, which at the time of submission ranked 354694 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

myUPB 2.2.6 Local File Inclusion

=============== altbta ====================== Name: myUPB = v2.2.6 Multiple Vulnerabilities Download: http://sourceforge.net/projects/textmb/files/UPB/ Vulnerability: CSRF privilege escalation Tested on: 2.2.6 Author : altbta [email protected] Dork: "Powered by myUPB" ================= backup exploi...

BlaB! Lite 0.5 Remote File Inclusion

'/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- | Remote File Inclusion Vulnerability |...

BlaB! Lite <= 0.5 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== BlaB! Lite == 0.5 Remote File Inclusion Vulnerability ====================================================== + Script : Chat Scripts » BlaB! Lite: +...

BlaB! Lite 0.5 - Remote File Inclusion

BlaB! Lite 0.5 - Remote File Inclusion '/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- |...

BlaB! Lite 0.5 - Remote File Inclusion

'/ -.- ----------------------oOO------OOo---------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ----------------------------------------------------------- | Remote File Inclusion Vulnerability |...

CVE-2010-1707

Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...

CVE-2010-1707

Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...

CVE-2010-1707: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...

CVE-2009-4791: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Family Connections aka FCMS before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the 1 letter parameter to addressbook.php, 2 id parameter to recipes.php, 3 year parameter to register.php, 4 pollid parameter to home.php, and 5 email...