jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting

=============================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

traindepot 0.1 - Local File Inclusion Cross-Site Scripting

traindepot 0.1 - Local File Inclusion Cross-Site Scripting ============================================================ Traindepot 0.1 LFI/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| -------...

Traindepot 0.1 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Traindepot 0.1 LFI/XSS Multiple Remote Vulnerabilities ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

tornado-xss.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =========:: Tornado Knowledge Retrieval...

[web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =========:: Tornado Knowledge Retrieval Syste...

CVE-2008-2557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

PHP-Address Book 3.1.5 - SQL Injection Cross-Site Scripting

PHP-Address Book 3.1.5 - SQL Injection Cross-Site Scripting ============================================================ PHP-Address Book SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

meBiblio 0.4.7 (SQL/Upload/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== meBiblio 0.4.7 SQL/Upload/XSS Multiple Remote Vulnerabilities ===============================================================...

Mini-CWB <= 2.1.1 Remote XSS Vulnerability

========================================================== Mini-CWB = 2.1.1 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 25 May 2008 SITE : www.citec.us APPLICATION : BMForum VERSION : = 2.1.1 Lastest Version VENDOR :...

phpsqlitecms-xss.txt

========================================================== phpSQLiteCMS Multiple Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 21 May 2008 SITE : www.citec.us APPLICATION : phpSQLiteCMS VERSION : 1 RC2 Lastest Version VENDOR :...

appservopen-xss.txt

========================================================== AppServ Open Project XSS =Example= Alert: - http://target/index.php?appservlang=" - http://target/index.php?appservlang=" Open Window - http://target/index.php?appservlang="window.open/phpinfo.php/ - http://target/index.php?appservlang="...

starsgames-xss.txt

========================================================== Starsgames Control Panel XSS =Example= Alert: - http://target/index.php?showtopic=18&st=alert/xss/ Iframe & Fake Login: - http://target/index.php?showtopic=18&st= Let's Fun... Greetz: ZeQ3uL,BAD $ectors, Snapter, Conan, Win7dos, JabAv0C...

AppServ Open Project < = 2.5.10 Remote XSS Vulnerability

========================================================== AppServ Open Project = 2.5.10 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 19 May 2008 SITE : www.citec.us APPLICATION : AppServ Open Project VERSION : = 2.5.10 VENDOR...

CVE-2008-1225: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

No description provided by source. project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9, v1.0.8, or lower??...

DRBGuestbook Remote XSS Vulnerability

Oo Title: DRBGuestbook Remote XSS Vulnerability Download: http://www.hotscripts.com/jump.php?listingid=67702&jumptype=1 Author: Gokhan Contact: [email protected] | KAF KAF KAF SIN SIN SIN KAFSIN KAFSIN KAF Vuln Code: index.php XSS:...

CVE-2007-5091: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eGroupWare 1.4.001 allow remote attackers to inject arbitrary web script or HTML via the catdatacolor parameter to 1 preferences/inc/class.uicategories.inc.php and 2 admin/inc/class.uicategories.inc.php...

vigilecms-xss.txt

Name : Vigile CMS v1.8 Multiple Remote XSS Vulnerability Download : http://www.itcms.it/ Date : 20-09-2007 Author : x0kster Mail : [email protected] Note : For works, the wiki or the download module must be installed in the site. PoCs : Wiki 1 :...

Vigile CMS v1.8 Multiple Remote XSS Vulnerability

Name : Vigile CMS v1.8 Multiple Remote XSS Vulnerability Download : http://www.itcms.it/ Date : 20-09-2007 Author : x0kster Mail : [email protected] Note : For works, the wiki or the download module must be installed in the site. PoCs : Wiki 1 :...

CVE-2007-4530: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via 1 the errortext parameter to errorbox.html or 2 the oktitle parameter to okbox.html...