Unfixed XSS vulnerability at www.mailer.bankaustria.at

Security researcher Viper.aT, has submitted on 12/01/2009 a cross-site-scripting XSS vulnerability affecting www.mailer.bankaustria.at, which at the time of submission ranked 6028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It i...

AJauctionPro Oopd 3.0 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + AJauctionPro Oopd V 3.0 Search Remote XSS Vulnerability + Software : AJauctionPro Oopd V 3.0 + Author : 599eme Man + Contact : [email protected] + Thanks :...

CVE-2009-2424

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Unfixed XSS vulnerability at www.wintotal.de

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.wintotal.de, which at the time of submission ranked 50674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is current...

Unfixed XSS vulnerability at tel.dict.cn

Security researcher Emrullah Akdemir, has submitted on 06/09/2009 a cross-site-scripting XSS vulnerability affecting tel.dict.cn, which at the time of submission ranked 1686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

getaphpsite e-store SQL Injection

getaphpsite e-store where Remote Sql inj script: http://www.getaphpsite.com/6.html ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMD...

Unfixed XSS vulnerability at www.graphfr.com

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting www.graphfr.com, which at the time of submission ranked 100983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

Unfixed XSS vulnerability at www.schoolbox.com

Security researcher firemaze, has submitted on 09/07/2008 a cross-site-scripting XSS vulnerability affecting www.schoolbox.com, which at the time of submission ranked 985853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Unfixed XSS vulnerability at www.metroradio.co.uk

Security researcher Milisx, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.metroradio.co.uk, which at the time of submission ranked 455982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.votesmart.org

Security researcher holisticinfosec, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.votesmart.org, which at the time of submission ranked 57857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/04/2008. It i...

Unfixed XSS vulnerability at www.thebighub.com

Security researcher Uber0n, has submitted on 03/01/2008 a cross-site-scripting XSS vulnerability affecting www.thebighub.com, which at the time of submission ranked 182358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Unfixed XSS vulnerability at www.cpmr.biz

Security researcher CCC, has submitted on 16/02/2008 a cross-site-scripting XSS vulnerability affecting www.cpmr.biz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currently unfixed. ...

mamboquran-sql.txt

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

Unfixed XSS vulnerability at www.plastics.org.nz

Security researcher koolkeith12345, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.plastics.org.nz, which at the time of submission ranked 6701844 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/02/2008. I...