PHP-Fusion Auto Database System 1.0 Infusion SQL Injection

Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Tested on: Firefox 3.0.15, , IE 8, mySQL...

CmsEasp 2.0.0 XSS vulnerability

易通企业网站系统也称易通企业网站程序，是易通公司开发中国首套免费提供企业网站模板的营销型企业网站管理系统，系统前台生成html、完全符合SEO、同时有在线客服、潜在客户跟踪、便捷企业网站模板制作、搜索引擎推广等功能的企业网站系统。 CmsEasy 2.0.0 null http://server/index.php?act=search&case=%3Cscript%3Ealert%28/xss/%29%3C/script%3E...

Cisco Wireless Control System XSS

Product Name: Cisco Wireless Control System Vendor: http://www.cisco.com Date: 4 August, 2010 Author: [email protected] [email protected] Original URL: http://www.tomneaves.com/CiscoWirelessControlSystemXSS.txt Discovered: 8 July, 2010 Disclosed: 4 August, 2010 I. DESCRIPTION The Cisco Wireless...

Thousand Bo enterprise website management system v2010 Build 0 7 1 6 vulnerability analysis-vulnerability warning-the black bar safety net

Release time: 2010-07-16 Affected version: Thousand Bo enterprise website management system v2010 Build 0 7 1 6 Vulnerability Description: The search type injection vulnerability Default background address: http://127.1/system/AdminLogin.Asp Publishing author: m4r10 reproduced please indicate the...

Unfixed XSS vulnerability at www.afmm.fr

Security researcher Xylitol, has submitted on 07/01/2010 a cross-site-scripting XSS vulnerability affecting www.afmm.fr, which at the time of submission ranked 300643 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...

TWiki Search Function Arbitrary Command Execution

This module exploits a vulnerability in the search component of TWiki. By passing a 'search' parameter containing shell metacharacters to the 'WebSearch' script, an attacker can execute arbitrary OS commands. This module requires Metasploit: https://metasploit.com/download Current source:...

Scribd.com Cross Site Scripting

SecWorm.net - Advisory http://SecWorm.net/ Steam XSS Vulnerability ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site Scripting...

Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user's browser. The following specific issues were identified: It is...

Advanced Image Hosting v2.2 XSS

No description provided by source. Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

Unfixed XSS vulnerability at www.safc.com

Security researcher cueballr, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.safc.com, which at the time of submission ranked 112361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Unfixed XSS vulnerability at www.mailer.bankaustria.at

Security researcher Viper.aT, has submitted on 12/01/2009 a cross-site-scripting XSS vulnerability affecting www.mailer.bankaustria.at, which at the time of submission ranked 6028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It i...

AJauctionPro Oopd 3.0 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + AJauctionPro Oopd V 3.0 Search Remote XSS Vulnerability + Software : AJauctionPro Oopd V 3.0 + Author : 599eme Man + Contact : [email protected] + Thanks :...

CVE-2009-2424

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Unfixed XSS vulnerability at www.wintotal.de

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.wintotal.de, which at the time of submission ranked 50674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is current...

Unfixed XSS vulnerability at tel.dict.cn

Security researcher Emrullah Akdemir, has submitted on 06/09/2009 a cross-site-scripting XSS vulnerability affecting tel.dict.cn, which at the time of submission ranked 1686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

getaphpsite e-store SQL Injection

getaphpsite e-store where Remote Sql inj script: http://www.getaphpsite.com/6.html ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMD...

Unfixed XSS vulnerability at www.graphfr.com

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting www.graphfr.com, which at the time of submission ranked 100983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...