CVE-2008-0826

Cross-site scripting XSS vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Mambo MOStlyCE Mambot Arbitrary File Rename

The remote host is running MOStlyContent Editor MOStlyCE, the default WYSIWYG editor for Mambo. The version of MOStlyCE installed on the remote host contains a design flaw that may allow an attacker to rename files subject to the privileges of the web server user id. An unauthenticated attacker m...

CVE-2008-0455

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

Unfixed XSS vulnerability at www.naa.org

Security researcher holisticinfosec, has submitted on 18/01/2008 a cross-site-scripting XSS vulnerability affecting www.naa.org, which at the time of submission ranked 169593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/03/2008. It is...

Debian Security Advisory DSA 125-1 (analog)

The remote host is missing an update to analog announced via advisory DSA 125-1. OpenVAS Vulnerability Test $Id: deb1251.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 125-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Unfixed XSS vulnerability at www.rotary9640.org

Security researcher Camilo-TcK, has submitted on 01/10/2008 a cross-site-scripting XSS vulnerability affecting www.rotary9640.org, which at the time of submission ranked 9787259 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is...

Unfixed XSS vulnerability at www.winchesterguns.com

Security researcher skathgh420, has submitted on 01/08/2008 a cross-site-scripting XSS vulnerability affecting www.winchesterguns.com, which at the time of submission ranked 197648 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It ...

Unfixed XSS vulnerability at www.canuckster.com

Security researcher Uber0n, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.canuckster.com, which at the time of submission ranked 519412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

Unfixed XSS vulnerability at www.cad-media.com

Security researcher Mutant, has submitted on 01/03/2008 a cross-site-scripting XSS vulnerability affecting www.cad-media.com, which at the time of submission ranked 133488 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

aolygp-overflows.txt

The AOL YGP Picture Editor ControlAIM PicEditor Control version 9.5.1.8 suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows: ---------------- function Check var s = 'A'; while s.length...

Unfixed XSS vulnerability at www.3mori.co.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www.3mori.co.jp, which at the time of submission ranked 7706455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. ...

Unfixed XSS vulnerability at www.galeriebeaute.be

Security researcher cyber, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.galeriebeaute.be, which at the time of submission ranked 7017358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

F5 Networks FirePass 4100 SSL VPN - 'My.Logon.php3' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26659/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Unfixed XSS vulnerability at lycos.shermantx.oodle.com

Security researcher CCC, has submitted on 23/11/2007 a cross-site-scripting XSS vulnerability affecting lycos.shermantx.oodle.com, which at the time of submission ranked 15048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

Unfixed XSS vulnerability at www.cancionero.com.ar

Security researcher CCC, has submitted on 22/11/2007 a cross-site-scripting XSS vulnerability affecting www.cancionero.com.ar, which at the time of submission ranked 55300 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/11/2007. It is...

Unfixed XSS vulnerability at www.sitoaperto.it

Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.sitoaperto.it, which at the time of submission ranked 2408910 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at forum2001.jinbo.net

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting forum2001.jinbo.net, which at the time of submission ranked 234820 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.eksamuhendislik.com.tr

Security researcher GeFORC3, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.eksamuhendislik.com.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Gngora Fernndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz" Sto...

Unfixed XSS vulnerability at live.sohosai.com

Security researcher kusomiso.com, has submitted on 14/10/2007 a cross-site-scripting XSS vulnerability affecting live.sohosai.com, which at the time of submission ranked 576567 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...