iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

CVE-2009-3153

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

CVE-2009-3153

CVE-2009-3153 describes multiple cross-site scripting (XSS) vulnerabilities in the x10 MP3 Search engine 1.6.5. The issues allow remote attackers to inject arbitrary scripts/HTML via: 1) pic_id (includes/video_ad.php), 2) category (linkvideos_listing.php), 3) id (templates/header1.php), 4) id (mp...

x10 MP3 Automatic Search Engine 1.6.5b - video_listing.php?key Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - videolisting.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - embed.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

x10 MP3 Automatic Search Engine 1.6.5b - '/templates/header1.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5 - 'linkvideos_listing.php?category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'embed.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'lyrics.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - info.php?name Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - info.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

x10 MP3 Automatic Search Engine 1.6.5b - adultvideo_listing.php?key Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - adultvideolisting.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. A...

x10 MP3 Automatic Search Engine 1.6.5 - linkvideos_listing.php?category Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5 - linkvideoslisting.php?category Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied inpu...

x10 MP3 Automatic Search Engine 1.6.5b - templatesheader1.php?id Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - templatesheader1.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

x10 MP3 Automatic Search Engine 1.6.5b - 'info.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'video_listing.php?key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

Discuz! Account the issuance of the plug-in injection 0day-vulnerability warning-the black bar safety net

Discuz! Account the issuance of the plug-in injection 0day Plugin name:2Fly giftnumberpayment system 漏洞 文件 :2flygift.php Version:latest version Exp:http://www. xxx. com/2flygift. php? pages=content&gameid=1 6 and 1=2 union select 1,2,3,4,concatusername,0x3a,password,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1...

CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

Design/Logic Flaw

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

CVE-2008-6960

The CVE-2008-6960 entry concerns X10media’s x10 Automatic Mp3 Search Engine Script (versions 1.5.5–1.6). According to the description, the vulnerability is in download.php, where an encoded url parameter allows remote attackers to read arbitrary files, demonstrated by retrieving database credenti...