KubeLabs PHPDug 2.0 - 'upcoming.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40554/info KubeLabs PHPDug is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Roundcube Webmail 0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

MercuryBoard 1.1.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37605/info MercuryBoard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

pL-PHP 0.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37593/info pL-PHP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Elite Gaming Ladders 3.0 SQL Injection

Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit Date: January 3rd, 2010 Author: Sora Version: 3.0 Tested on: Windows and Linux ---------------------------------------- Elite Gaming Ladders v3.0 SQL Injection Exploit Contact: vhr95zw at hotmail dot com Website:...

Left 4 Dead Stats SQL Injection

---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 Dead Stats suffers from a remote SQL...

Elite Gaming Ladders v3.0 SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================== Elite Gaming Ladders v3.0 SQL Injection Exploit =============================================== Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit Date: January 3rd, 2010 Author:...

Left 4 Dead Stats 1.1 - SQL Injection

---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 Dead Stats suffers from a remote SQL...

Left 4 Dead Stats 1.1 - SQL Injection

Left 4 Dead Stats 1.1 - SQL Injection ---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "In your dreams, script kiddies." VULNERABILITY DESCRIPTION: Left 4 De...

Obsession-Design Image-Gallery 1.1 - 'display.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40557/info Obsession-Design Image-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Left 4 Dead Stats 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= Left 4 Dead Stats 1.1 SQL Injection Vulnerability ================================================= ---------------------------------- Left 4 Dead Stats SQL Injection Vulnerability Author:...

PHPCart 3.1.2 - search.php Cross-Site Scripting

PHPCart 3.1.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37567/info PHPCart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

VisionGate 1.6 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37569/info VisionGate is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

CMS Made Simple 1.x - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40483/info CMS Made Simple is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied inputs. The application is also prone to a cross-site request-forgery vulnerability. An attacker may...

VisionGate 1.6 - login.php Cross-Site Scripting

VisionGate 1.6 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37569/info VisionGate is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting

Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/38250/info The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone t...

Discuz! 1.0 - referer Cross-Site Scripting

Discuz! 1.0 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Joomla! Component MS Comment 0.8.0b - Security Bypass / Cross-Site Scripting

source: https://www.securityfocus.com/bid/38250/info The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone to a security-bypass vulnerability because it fails to reset the CAPTCHA aft...

BosClassifieds 1.20 - recent.php Cross-Site Scripting

BosClassifieds 1.20 - recent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37555/info BosClassifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

DieselPay 1.6 - Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/37564/info DieselPay is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these vulnerabilities to obtain sensitive information,...