639 matches found
GetMyOwnArcade (search.php query) Remote SQL Injection Vulnerability
No description provided by source. GetMyOwnArcade search.php $query SQL-Injection Discovered By: RoXur777 August 11th 2007 Google-Dork: "Powered by GetMyOwnArcade" / $query is not being filtered before getting passed to a query. Therefore, we can inject SQL code into the SQL-Query. Using...
CVE-2007-4075
Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Unfixed XSS vulnerability at www.multiserve.co.nz
Security researcher CoNqUeRoR, has submitted on 26/07/2007 a cross-site-scripting XSS vulnerability affecting www.multiserve.co.nz, which at the time of submission ranked 4110209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
CVE-2007-3693
Cross-site scripting XSS vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function...
Cross site scripting
Cross-site scripting XSS vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function...
rpm2html 1.6 XSS Vulnerability
----------------------------------------------------------------------| My Name: Vladiii | My Country: Romania | My Site: http://www.rstzone.net | My Team: I hope to enter in RST-Crew : | Contact me: [email protected] | Special Shoutz: kw3rln fluffybunny, floflowsupremacy, mozi2weed, | & all...
CVE-2007-1903
Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...
Cross site scripting in mephisto 0.7.3
Cross site scripting in mephisto 0.7.3 security advisory References: http://www.mephistoblog.com https://vulners.com/cve/CVE-2007-1873 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal sessio...
CVE-2006-7188
The CVE-2006-7188 entry concerns WebAPP by web-app.net. Affected component: the search.pl in cgi-lib/user-lib. Before 20060909, remote attackers could read internal forum posts by crafting certain requests, with the issue possibly tied to the $info{'forum'} variable. The provided sources confirm ...
CVE-2006-7188
The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info'forum' variable...
Unfixed XSS vulnerability at www.dll-files.com
Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.dll-files.com, which at the time of submission ranked 15436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...
[Full-disclosure] Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Horde IMP Webmail Client version H3 4.1.4 was released a few hours ago. It contains fixes for 2 XSS issues compared to 4.1.4 RC1. 1. Script injection through email subject lines in threaded view Subject lines of emails, when displayed in vulnerabl...
Unfixed XSS vulnerability at thecrack.us
Security researcher St@rExT, has submitted on 03/03/2007 a cross-site-scripting XSS vulnerability affecting thecrack.us, which at the time of submission ranked 247262 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is currently...
Unfixed XSS vulnerability at www.araba.com
Security researcher zuppergazi, has submitted on 24/02/2007 a cross-site-scripting XSS vulnerability affecting www.araba.com, which at the time of submission ranked 2152 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/03/2007. It is currentl...
CVE-2006-5080
Cross-site scripting XSS vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
JetBox cms (search_function.php) Remote File Include
Found by : CarcaBot -- E-mail : CarcaBotx at Yahoo dot com -- $relativescriptpath.'/libs/htmlheader.php -- Exploit -- Google Dork: powered by Jetbox CMS -- http://www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relative scriptpath=Evil Code -- Greets goes to : CarcaBot Administrator...
jetboxCMSinclude.txt
Jetbox CMS searchfunction.php Remote File Include F0und by : D3nGeR E-mail : [email protected] the code include $relativescriptpath.'/libs/htmlheader.php The Expl dork : powered by Jetbox CMS www.sitename.com/path/includes/phpdig/libs/searchfunction.php?relativescriptpath=Evil Code...
[Full-disclosure] Content Management Framework "G3" - XSS Vulnerability in Search Function
Content Management Framework "G3" - XSS Vulnerability in Search Function INTRO According to the manufacturer, "G3" is a classic content-management-system, allowing customers to manage their own websites without knowing much about webpublishing. Information about the product is available at:...