CVE-2007-3593: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...

CVE-2007-3182: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Calendarix 0.7.20070307, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 month parameters to calendar.php, and the 3 leftfooter parameter to calfooter.inc.php. NOTE: the ycyear...

cmail534-xss.txt

//'=============================================================================================== //'Script Name: CmailServer WebMail Cmail XSS JavaScript:alertdocument.cookie;"...

CVE-2007-1331: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to inject arbitrary web script or HTML via unspecified vectors that bypass the client-side protection scheme, one of which may be the q parameter to the search program. NOTE: some...

PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability

Exploit for multiple platform in category remote exploits ==================================================== PHP 4.4.3 - 4.4.6 phpinfo Remote XSS Vulnerability ==================================================== //////////////////////////////////////////////////////////////////////// // // // ...

[Full-disclosure] Call Center Software - Remote Xss Post Exploit -

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: WindowsLinuxUnix -=+ Bug...

ESupport Multiple HTML Injection Vulnerabilities

ESupport Multiple HTML Injection Vulnerabilities Kayako SupportSuite offers true integrated Multi-Channel solution allowing you to manage your emails, online issues, chats, self service and issues received by phone. The entire system has been designed to improve productivity and provide seamless...

Uphotogallery Multiple Cross-Site Scripting Vulnerability

Uphotogallery Multiple Cross-Site Scripting Vulnerability Uphotogallery has been developed to run exclusively on web sites hosted on Windows Servers with Internet Information Server 4.0 or higher and ASP 3.0 installed. No other Platforms are supported. Uphotogallery supports both Microsoft Access...

CVE-2007-0365: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830...

CVE-2006-6746: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-6249: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-5321: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

MicroGuestBook Remote XSS Attack

.:. MicroGuestBook Remote XSS Bug .:. Date: ----- July 2006, 22 Product: -------- MicroGuestBook Latest Version Vendor: ------- http://www.phptoys.com Description: ------------ Micro guestbook is a MySQL based guestbook script with a CSS based attractive interface. It can store the name, date,...

Fantastic Guestbook v2.0.1 Advisory

.:. Fantastic Guestbook v2.0.1 Advisory .:. Date of written Advisory: ------------------------- July, 11 2006 Product: -------- Fantastic Guestbook v2.0.1 Vendor: ------- http://fscripts.com/ Description: ------------ Fantastic GuestBook version 2.0.1 is simple GuestBook; where remote user withou...

CVE-2006-3624: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to 1 player.php or 2 popup.php...

CVE-2006-3558: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via 1 the judulartikel parameter in teman.php and 2 the title of an article sent to admin, which is displayed when unauthenticated users visit index.php...

Fantastic Guestbook v2.0.1 Advisory

.:. Fantastic Guestbook v2.0.1 Advisory .:. Date of written Advisory: ------------------------- July, 11 2006 Product: -------- Fantastic Guestbook v2.0.1 Vendor: ------- http://fscripts.com/ Description: ------------ Fantastic GuestBook version 2.0.1 is simple GuestBook; where remote user withou...

Fantastic Guestbook v2.0.1 Advisory

Hi, I found a Remote XSS Vulnerability in Fantastic Guestbook v2.0.1. Here you will find my original advisory: http://it.security.netsons.org/exploit/FGB.txt Best Regards, Omni -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Conto Arancio: 3.50 per tutto il 200...

ASP Discussion Forum Remote XSS Attack

Hi, I found a vulnerability in ASP Discussion Forum. The vulnerability is a Remote XSS Attack. This is the original Advisory: http://colander.altervista.org/advisory/ASPDisc.txt Let me know if you want to post it up or not. Best Regards, Omni -- Email.it, the professional e-mail, gratis per te:...

Newswriter v1.0 Remote XSS Exploit

------------------------------------------------------------------ - Newswriter v1.0 Remote XSS Exploit - -= http://colander.altervista.org/advisory/Newswriter.txt =- ------------------------------------------------------------------ -= Newswriter v1.0 =- Omnipresent May 20, 2006 Vunerabilitys:...