4258 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the 1 school and 2 email parameters...
Adam Shostack on the Science of Security and Value of Thinking Differently
Dennis Fisher talks to Adam Shostack of Microsoft, about the evolution of thinking around “The New School of Information Security,” his new group blog and what surprised him most when he went to work at Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of...
CVE-2008-6637
Multiple cross-site scripting XSS vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the 1 school and 2 email parameters...
CVE-2009-0394
SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...
merlixeducate-bypassdisclose.txt
Merlix Educate Servert Bypass/DD Multiple Remote Vuln ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : -----------------------------------------------------------...
vibroschool-sql.txt
! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...
cmsschool-sql.txt
! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...
CMS-School 2005 (showarticle.php) Remote SQL injection Vulnerability
No description provided by source. --------------------------------------------------------------------------------------------- Download : http://www.niclor.net/prodotti/cmsschool/ Exploit : http://localhost/cmsschool/showarticle.php?aID=-4+union+select+version,2,3-- live demo :...
CMS-School 2005 - showarticle.php SQL Injection
CMS-School 2005 - showarticle.php SQL Injection ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO...
Vibro-School-CMS (nID) Remote SQL injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Vibro-School-CMS nID Remote SQL injection Vulnerability ========================================================= ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO...
Vibro-School-CMS - 'nID' SQL Injection
! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...
CMS-School 2005 (showarticle.php) Remote SQL injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== CMS-School 2005 showarticle.php Remote SQL injection Vulnerability ====================================================================...
CMS-School 2005 - 'showarticle.php' SQL Injection
! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...
Unfixed XSS vulnerability at www.opensourceschool.de
Security researcher Fabian Fingerle, has submitted on 30/07/2008 a cross-site-scripting XSS vulnerability affecting www.opensourceschool.de, which at the time of submission ranked 1570319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Site@School <= 2.4.10 (fckeditor) Session Hijacking / File Upload Exploit
No description provided by source. ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....:...
Unfixed XSS vulnerability at www.hevre.co.il
Security researcher CaTz, has submitted on 07/04/2008 a cross-site-scripting XSS vulnerability affecting www.hevre.co.il, which at the time of submission ranked 14579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...
Site@School 2.4.10 - FCKeditor Session Hijacking Arbitrary File Upload
Site@School 2.4.10 - FCKeditor Session Hijacking Arbitrary File Upload ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit -------------------------------------------------------------------------...
Site@School 2.4.10 - 'FCKeditor' Session Hijacking / Arbitrary File Upload
?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Unfixed XSS vulnerability at www.frankfurt-school.de
Security researcher Fabian Fingerle, has submitted on 18/02/2008 a cross-site-scripting XSS vulnerability affecting www.frankfurt-school.de, which at the time of submission ranked 425507 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/200...
