33 matches found
Rinkya Cross Site Scripting
Exploit Title: Rinkya Cross Site Scripting Date: 22.10.2011 - 17.52 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Windows xp sp3 Platform: Php ------------------------------------------------------------- search.php http://www.rinkya.com/membership/search.php "alert"DDz Mr.PaPaRoSSe"...
StartSite.ir Cross Site Scripting
------------In The Name Of God------------ StartSite.ir Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Powered by StartSite.ir" xss EXPLOIT: alert/0/ VULN IN HERE...
PluggedOut Blog 1.9.9 - year Cross-Site Scripting
PluggedOut Blog 1.9.9 - year Cross-Site Scripting source: https://www.securityfocus.com/bid/46962/info PluggedOut Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...
MKPortal speed connection module Vulnerability
============================================== MKPortal speed connection module Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 /' /' / /' 0 /, // ,/ / 1 // /' / // /' / /' 0 / / / / / / 1 / / 0 ////// // //...
MKPortal Contact module XSS Vulnerability
========================================= MKPortal Contact module XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...
PicMe v2.1.0 XSS Vulnerability
No description provided by source. ======================================================================================== | Title : PicMe v2.1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
turnkeyforms Text Link Sales (id) XSS/SQL Injection Vulnerability
No description provided by source. turnkeyforms Text Link Sales Remote Sql inj & xss ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug...
Wabbit PHP Gallery v0.9 Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...
golden book XSS
golden book XSS By : sn0oPy Risk : high Site : http://triviere.free.fr/ exploit : any site scripting scriptalert'tested by sn0oPy'/script for exemple Dork : inurl:"/goldenbook/index.php" contact : [email protected] greetz : subzero, Avg Teamforums.avenir-geopolitique.net...
Xss In SaphpLesson3.0
Software: SaphpLesson Web Site: http://www.arabless.com Versions:3.0 POWERED BY: SaphpLesson3.0 Type: Xss Enter http://www.xxx.com/xxx/search.php and search : Scriptalertdocument.cookie/Script ||||||||||||||||||||||||||||||||||||||||||| |/////////////////////////////////////////| | almokanna | ||...
ArbitroWeb v0.6 Javascript injection vulnerability
vendor: ArbitroWeb about: An anonymous web surfing proxy written in PHP. ArbitroWeb will redirect all web requests thru it's set of scripts, all URL's contained will be adjusted/mangled to it's own scripts. date: june 22nd, 2004 vendor status: ? problem: javascript can be injected into the...
More OmniHTTPd Problems
I've discovered another vulnerability in one of the OmniHTTPd sample apps. This time, the culprit is "/cgi-bin/redir.exe". This app is vulnerable to a newline injection issue. The vulnerability occurs because the "URL" query parameter case sensitive is decoded and placed directly into the respons...