CVE-2008-6924

CVE-2008-6924 affects eSyndiCat Directory 2.2, with XSS in register.php allowing remote injection of scripts via six parameters (username, email, password, password2, security_code, register). The initial data lists a MEDIUM base score (CVSS v2: 4.3) and mentions no exploitation details; no remed...

CVE-2008-6924: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 email, 3 password, 4 password2, 5 securitycode, and 6 register parameters...

Opial 1.0 File Upload / XSS / SQL Injection

::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL InjectionXSSalertdocument.cookie; Demo: http://www.opial.com/demo/register.ph...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

Sql injection

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2009-1228

CVE-2009-1228 is a documented cross-site scripting (XSS) vulnerability in the Arcadwy Arcade Script CMS, specifically in the register.php script where the username field (user_name parameter) can be injected with arbitrary web script or HTML by remote attackers. The NVD entry lists a CVSSv2 base ...

CVE-2009-1228: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

BlogMan 0.45 Multiple Vulnerabilities

Salvatore "drosophila" Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

gamersfusion-xss.txt

--------------------------------------------------------- Portal Name: Gamers Fusion 2.5 Vendor : http://sourceforge.net/projects/gamers-fusion Vulnerable File : register.php Dork: Vallheru Team based on Gamers-Fusion 2.5 Author : PouyaServer , [email protected] Vulnerability : XSS Cross sit...

Unfixed XSS vulnerability at www.metavantecards.com

Security researcher PaPPy, has submitted on 10/05/2008 a cross-site-scripting XSS vulnerability affecting www.metavantecards.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is current...

Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access

source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users. Vikingboard 0.2 Beta is vulnerable; other versions may also be affected. The followin...

SkaLinks 1.5 - register.php Arbitrary Add Editor

SkaLinks 1.5 - register.php Arbitrary Add Editor || || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add...

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

|| || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add admin EXPLOITS:...

Unfixed XSS vulnerability at www.theshiznit.co.uk

Security researcher PaPPy, has submitted on 09/11/2008 a cross-site-scripting XSS vulnerability affecting www.theshiznit.co.uk, which at the time of submission ranked 254247 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...

Unfixed XSS vulnerability at www.ultimatexchange.net

Security researcher PaPPy, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatexchange.net, which at the time of submission ranked 7394931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.hitmanslife.com

Security researcher PaPPy, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.hitmanslife.com, which at the time of submission ranked 125464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...