CVE-2007-1443: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in Woltlab Burning Board wBB 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the 1 rusername, 2 remail, 3 rpassword, 4 rconfirmpassword, 5 rhomepage, 6 ricq, 7 raim, 8 ryim, ...

CVE-2007-1443

CVE-2007-1443 covers multiple reflected cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e, exploitable via the register.php form fields (r_username, r_email, r_password, r_confirmpassword, r_homepage, …, r_timezoneoffset, r_usewysiwyg...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

CVE-2007-1291

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

CVE-2007-1291

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

CVE-2007-1291: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Tyger Bug Tracking System TygerBT 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 Login.php and 2 Register.php...

CVE-2006-7072

Cross-site scripting XSS vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the 1 busername and 2 c parameters to a index.php, the busername parameter to b admin/index.php, and 3 cphone parameter to register.php...

CVE-2006-7072

Cross-site scripting XSS vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the 1 busername and 2 c parameters to a index.php, the busername parameter to b admin/index.php, and 3 cphone parameter to register.php...

CVE-2006-7072: Undefined Security Weakness

Cross-site scripting XSS vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web script and HTML via the 1 busername and 2 c parameters to a index.php, the busername parameter to b admin/index.php, and 3 cphone parameter to register.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2007-1109: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2006-7036

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

CVE-2006-7036: Undefined Security Weakness

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

Vulnerabilities в WordPress 2.0

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 03.11.2006 Cross-Site Scripting уязвимостях в движке WordPress 2.0. Уязвимости в скрипте wp-register.php. XSS: POST запрос на странице http://site/wp-register.php: "scriptalertdocument.cookie/script В полях: Имя пользователя и E-Mail. Дополнительн...

CVE-2007-0864

SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parameter...

CVE-2007-0864

CVE-2007-0864 describes an SQL injection in register.php of LushiWarPlaner 1.0 , exploitable via the id parameter. The underlying issue is unsafe SQL construction that allows remote attackers to inject arbitrary SQL commands. Impact stated: potential data exposure or modification (partial confide...

LushiWarPlaner 1.0 (register.php) Remote SQL Injection Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== 'Script Name: LushiWarPlaner 1.0 register.php Remote SQL Injection Exploit 'Code...

CVE-2007-0864: Undefined Security Weakness

SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parameter...

LushiWarPlaner 1.0 (register.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== LushiWarPlaner 1.0 register.php Remote SQL Injection Exploit ============================================================== exploit2.asp 'Update: + Get Header 'Update: + Get...

LushiWarPlaner 1.0 - register.php SQL Injection

LushiWarPlaner 1.0 - register.php SQL Injection exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2...