599 matches found
LushiWarPlaner 1.0 - 'register.php' SQL Injection
exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2 ifdocument.form1.field1.value=="" alert"Exploit...
CVE-2007-0769
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
CVE-2007-0769
Phorum 5.1.18 contains an XSS vulnerability in register.php (CVE-2007-0769). The vulnerability is described as allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The vendor disputes the flaw, stating that characters are escaped properly. Public details do not spec...
CVE-2007-0769
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
CVE-2007-0769: Undefined Security Weakness
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
PT-2007-2135 · Extcalendar · Extcalendar
Name of the Vulnerable Software and Affected Versions: ExtCalendar versions 2 and earlier Description: The issue allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to...
CVE-2007-0681: Insufficiently Protected Credentials
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
Phorum < 5.1.19 register.php XSS
Binary data 3898.prm...
indexu-xss.txt
vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...
vulnerability script indexu all versions
vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1| in upgrade.php...
CVE-2006-4580
The CVE concerns The Address Book 1.04e: register.php allows remote attackers to bypass the 'Allow User Self-Registration' setting by supplying mode=confirm, enabling creation of arbitrary users. This is a client-side/configuration abuse affecting user provisioning, with the root cause described ...
CVE-2006-4580: Undefined Security Weakness
register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm"...
CVE-2006-6773: Undefined Security Weakness
pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the isadmin HTTP POST parameter to 1...
phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability
No description provided by source. SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.tx...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
CVE-2006-6168
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...
CVE-2006-6168
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...
CVE-2006-6168
CVE-2006-6168 affects TikiWiki (tiki-register.php) versions before 1.9.7. The issue arises from insufficient validation of the email field, allowing remote attackers to trigger “notification-spam” via vectors such as a comma-separated list of addresses. The NVD lists a base score of 7.5 (HIGH) wi...
CVE-2006-6168: Improper Input Validation
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...
CVE-2006-4874: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the 1 languageAdmin name and 2 languageAdmin back parameters in a modules/blocks.php; the 3 languageRegister title and 4 languageRegister title2 parameters in b...