Unfixed XSS vulnerability at www.flipdog.com

Security researcher Mutant, has submitted on 10/05/2008 a cross-site-scripting XSS vulnerability affecting www.flipdog.com, which at the time of submission ranked 38040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2008. It is currently...

Homes 4 Sale - 'results.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30517/info Homes 4 Sale is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Sql injection

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter...

CVE-2008-2909

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter...

CVE-2008-2909

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter...

CVE-2008-2909: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the searchtype parameter...

Clever Copy 3.0 (results.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hac...

Clever Copy 3.0 - results.php SQL Injection

Clever Copy 3.0 - results.php SQL Injection !/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t,...

Clever Copy 3.0 - 'results.php' SQL Injection

!/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hack, Sys-Flaw and of course the...

Cross site scripting

Cross-site scripting XSS vulnerability in Search.php in DiMeMa CONTENTdm CDM allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2...

CVE-2007-4245

Cross-site scripting XSS vulnerability in Search.php in DiMeMa CONTENTdm CDM allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2...

Unfixed XSS vulnerability at finditinyuma.com

Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting finditinyuma.com, which at the time of submission ranked 5655498 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2007. It is...

Unfixed XSS vulnerability at www.computingstudents.com

Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting www.computingstudents.com, which at the time of submission ranked 2961889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

nabopoll-sql.txt

Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...

Nabopoll Blind SQL Injection vulnerabilies

Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...

fcCMS10-xss.txt

Fix & Chips CMS v1.0 http://software.fixnchipsit.com/ Vulnerable files: staff.php delete-announce.php new-customer.php search.php client-results.php -------------------------------------------- staff.php XSS User input in the Announcement box isn't properly sanatized before being generated. A few...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...

CVE-2007-0146

Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...

CVE-2006-1217: Undefined Security Weakness

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to 1 results.php, 2 topolls.php, 3 pollit.php...

CVE-2006-0521: Undefined Security Weakness

Cross-site scripting XSS vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag...