259 matches found
[MajorSecurity #21] phpFaber TopSites <=2.0.9 - SQL Injection Vulnerability
MajorSecurity 21 phpFaber TopSites =2.0.9 - SQL Injection Vulnerability ----------------------------------------------------------------- Software: phpFaber TopSites Version: =2.0.9 Type: SQL Injection Vulnerability Made public: July, 19th 2006 Vendor: phpFaber, LLC Page: http://www.phpfaber.com/...
[MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure
MajorSecurity 19 AutoRank = 5.01 - Multiple XSS and cookie disclosure ------------------------------------------------------------ Software: AutoRank Version: =5.01 Type: Cross site scripting Discovery Date: June, 23th 2006 Made public: July, 2nd 2006 Vendor: JMB SOFTWARE Page:...
GreatDomainsXSS.txt
GreatDomains.com - XSS with cookie disclosure ---------------------------------------------- Type: Cross site scripting Date: June, 16th 2006 ---------------------------------------------- Credits: ---------------------------------------------- Discovered by: David "Aesthetico" Vieira-Kurz...
netscapeXSS.txt
Netscape.com - Cross site scripting vulnerability ---------------------------------------------- Type: Cross site scripting Date: June, 13th 2006 ---------------------------------------------- Credits: ---------------------------------------------- Discovered by: David "Aesthetico" Vieira-Kurz...
ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ASP Stats Generator = 2.1.1 SQL Injection Vulnerabilities ========================================================== /------------------------------------------------ IHS Public...
[SA20578] LogiSphere Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
mailman -- Multiple Vulnerabilities
Secunia reports: Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successfu...
EVA-Web <=2.1.2 vuln.
EVA-Web =2.1.2 vuln. Vuln. discovered by : r0t Date: 27 may 2006 vendor:http://spip-edu.edres74.net/ affected versions:2.1.2 and prior orginal advisory:http://pridels.blogspot.com/2006/05/eva-web-212-vuln.html Vuln. Description: EVA-Web contains a flaw that allows a remote cross site scripting...
zix112.txt
Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...
[SA20081] Website Baker "display_name" Script Insertion Vulnerability
TITLE: Website Baker "displayname" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA20081 VERIFY ADVISORY: http://secunia.com/advisories/20081/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Website Baker 2.x http://secunia.com/product/5455/ DESCRIPTION:...
FreeBSD : phpSysInfo -- XSS vulnerability (50457509-d05e-11d9-9aed-000e0c2e438a)
A Securityreason.com advisory reports that various cross site scripting vulnerabilities have been found in phpSysInfo. Input is not properly sanitised before it is returned to the user. A malicious person could exploit this to execute arbitrary HTML and script code in a users browser session. Als...
FreeBSD : mantis -- 'view_filters_page.php' XSS vulnerability (6e3b12e2-6ce3-11da-b90c-000e0c2e438a)
r0t reports : Mantis contains a flaw that allows a remote cross site scripting attack. This flaw exists because input passed to 'targetfield' parameter in 'viewfilterspage.php' isn't properly sanitised before being returned to the user. This could allow a user to create a specially crafted URL th...
CPS <=3.4.0 XSS
CPS =3.4.0 XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.cps-project.org/ affected versions:3.4.0 and prior orginal avdisory: http://pridels.blogspot.com/2006/04/cps-340-xss.html Vuln. Description: CPS contains a flaw that allows a remote cross site scripting attack. Thi...
OrbitHYIP XSS
OrbitHYIP XSS Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.orbitscripts.com/orbithyipoverview.html affected versions:2.0 and prior orginal advisory:http://pridels.blogspot.com/2006/04/orbithyip-xss.html Vuln. Description: OrbitHYIP contains a flaw that allows a remote cross site...
Barracuda vuln.
Barracuda vuln. Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.boonex.com/products/barracuda/ affected versions:1.1 and prior orginal advisory:http://pridels.blogspot.com/2006/04/barracuda-vuln.html Vuln. Description: Barracuda Directory contains a flaw that allows a remote sql injectio...
ampleShop™ eCommerce Software vuln.
ampleShop™ eCommerce Software vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendor:www.amplecom.com/ affected versions:2.1 and previous orginal advisory:http://pridels.blogspot.com/2006/04/ampleshop-ecommerce-software-vuln.html Vuln. Description: ampleShop™ contains a flaw that allows a...
RIblog Remote SQL Injection Exploit
------------------------------------------------------------------ - RIblog Remote SQL Injection Exploit - -= http://colander.altervista.org/advisory/riblog.txt =- ------------------------------------------------------------------ -= RIblog =- Omnipresent April 21, 2006 Vunerabilitys:...
phpLDAPadmin multiple vuln.
phpLDAPadmin multiple vuln. Vuln. discovered by : r0t Date: 21 april 2006 vendorlink:http://phpldapadmin.sourceforge.net/ affected versions:phpLDAPadmin 0.9.8 and prior orginal advisory: http://pridels.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html Vuln. Description: phpLDAPadmin contains a...
IPB <= 2.1.5 SQL inj. vuln.
IPB = 2.1.5 SQL inj. vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:http://www.invisionboard.com/ affected versions:2.1.5 and previous orginal advisory: http://pridels.blogspot.com/2006/04/ipb-215-sql-inj-vuln.html Vuln. Description: IPB contains a flaw that allows a remote sql...
Net Clubs Pro XSS vuln
Net Clubs Pro XSS vuln Vuln. discovered by : r0t Date: 20 april 2006 vendor:www.aasimedia.com/nc/nc.shtml affected versions:4.0 and prior orginal advisory: http://pridels.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html Vuln. Description: Net Clubs Pro contains a flaws that allows a remote cross...