Scribd.com Cross Site Scripting

SecWorm.net - Advisory http://SecWorm.net/ Steam XSS Vulnerability ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site Scripting...

Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user's browser. The following specific issues were identified: It is...

Advanced Image Hosting v2.2 XSS

No description provided by source. Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

Unfixed XSS vulnerability at www.safc.com

Security researcher cueballr, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.safc.com, which at the time of submission ranked 112361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Unfixed XSS vulnerability at www.mailer.bankaustria.at

Security researcher Viper.aT, has submitted on 12/01/2009 a cross-site-scripting XSS vulnerability affecting www.mailer.bankaustria.at, which at the time of submission ranked 6028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It i...

AJauctionPro Oopd 3.0 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + AJauctionPro Oopd V 3.0 Search Remote XSS Vulnerability + Software : AJauctionPro Oopd V 3.0 + Author : 599eme Man + Contact : [email protected] + Thanks :...

CVE-2009-2424

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Unfixed XSS vulnerability at www.wintotal.de

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting www.wintotal.de, which at the time of submission ranked 50674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is current...

Unfixed XSS vulnerability at tel.dict.cn

Security researcher Emrullah Akdemir, has submitted on 06/09/2009 a cross-site-scripting XSS vulnerability affecting tel.dict.cn, which at the time of submission ranked 1686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

getaphpsite e-store SQL Injection

getaphpsite e-store where Remote Sql inj script: http://www.getaphpsite.com/6.html ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMD...

Unfixed XSS vulnerability at www.graphfr.com

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting www.graphfr.com, which at the time of submission ranked 100983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is current...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125: Exposure of Sensitive Information to an Unauthorized Actor

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

Unfixed XSS vulnerability at www.schoolbox.com

Security researcher firemaze, has submitted on 09/07/2008 a cross-site-scripting XSS vulnerability affecting www.schoolbox.com, which at the time of submission ranked 985853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Unfixed XSS vulnerability at www.metroradio.co.uk

Security researcher Milisx, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.metroradio.co.uk, which at the time of submission ranked 455982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.votesmart.org

Security researcher holisticinfosec, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.votesmart.org, which at the time of submission ranked 57857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/04/2008. It i...