CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

Unfixed XSS vulnerability at www.schoolbox.com

Security researcher firemaze, has submitted on 09/07/2008 a cross-site-scripting XSS vulnerability affecting www.schoolbox.com, which at the time of submission ranked 985853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Unfixed XSS vulnerability at www.metroradio.co.uk

Security researcher Milisx, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.metroradio.co.uk, which at the time of submission ranked 455982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.votesmart.org

Security researcher holisticinfosec, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.votesmart.org, which at the time of submission ranked 57857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/04/2008. It i...

Unfixed XSS vulnerability at www.thebighub.com

Security researcher Uber0n, has submitted on 03/01/2008 a cross-site-scripting XSS vulnerability affecting www.thebighub.com, which at the time of submission ranked 182358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is...

Unfixed XSS vulnerability at www.cpmr.biz

Security researcher CCC, has submitted on 16/02/2008 a cross-site-scripting XSS vulnerability affecting www.cpmr.biz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currently unfixed. ...

mamboquran-sql.txt

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

Unfixed XSS vulnerability at www.plastics.org.nz

Security researcher koolkeith12345, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.plastics.org.nz, which at the time of submission ranked 6701844 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/02/2008. I...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...

CVE-2008-0265

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...

CVE-2008-0265

F5 BIG-IP TMUI (Configuration utility) contains multiple XSS vulnerabilities (CVE-2008-0265) in the SearchString parameter across several list JSPs (list_system.jsp, list_pktfilter.jsp, list_ltm.jsp, resources_audit.jsp, list_asm.jsp, and list.jsp in various dirs). The issue affects BIG-IP LTM/GT...

f5-xss.txt

F5 BIG-IP Web Management List Search XSS Product: F5 BIG-IP http://www.f5.com/products/big-ip/ The F5 BIG-IP web management interface contains a cross-site scripting vulnerability in the Search function present on several list-like pages. Parameter SearchString is not sanitized before it gets...

Unfixed XSS vulnerability at www.avh.asso.fr

Security researcher ironzorg, has submitted on 01/08/2008 a cross-site-scripting XSS vulnerability affecting www.avh.asso.fr, which at the time of submission ranked 919296 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It is...

Wordpress <= 2.3.1 Charset Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Wordpress Affected version: WordPress = 2.3.1 Exploit type: Remote Risk: Moderate CVE: pending 1. Summary 2. Detail 3. Proof of concept 4. Workaround 1. Summary Quoting from...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

MiniBB 2.1 - table SQL Injection

MiniBB 2.1 - table SQL Injection vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under :...

Unfixed XSS vulnerability at www.ddlbyte.com

Security researcher flux, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.ddlbyte.com, which at the time of submission ranked 91044 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...