CVE-2008-2644

Multiple cross-site scripting XSS vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the 1 data parameter to catalog.php, the 2 keyword parameter to search.php, the 3 page parameter to bb.php, and the 4 news parameter to order.php...

Yblog 0.2.2.2 - Cross-Site Scripting SQL Injection

Yblog 0.2.2.2 - Cross-Site Scripting SQL Injection / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || ||||...

Yblog 0.2.2.2 - Cross-Site Scripting / SQL Injection

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: yBlog 0.2.2.2 Multiple Remote...

Unfixed XSS vulnerability at www.annuaireblog.org

Security researcher Mystick, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.annuaireblog.org, which at the time of submission ranked 298465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/03/2009. It is...

Unfixed XSS vulnerability at www.sonidoo.com

Security researcher mygotmanoel, has submitted on 06/08/2008 a cross-site-scripting XSS vulnerability affecting www.sonidoo.com, which at the time of submission ranked 471093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to a register.php, b reminder.php, and c search.php; the 2 uname, 3 email, and 4 email2 parameters to register.php; the 5 email parameter to...

427BB 2.3.1 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

427bb 2.3.1 - SQL Injection / Cross-Site Scripting

============================================================ 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

426bb-sqlxss.txt

============================================================ 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

smeweb-sqlxss.txt

======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Tea...

smeweb 1.4b - SQL Injection Cross-Site Scripting

smeweb 1.4b - SQL Injection Cross-Site Scripting ======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergrou...

SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ===================================================== ======================================================= SMEweb 1.4b SQL/XSS...

CVE-2008-2453

CVE-2008-2453 affects the PHP Classifieds Script, with two SQL injection flaws: the fatherID parameter in browse.php and search.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Impact is described as remote arbitrary SQL execution with partial confidentiality/i...

Unfixed XSS vulnerability at www.femina.in

Security researcher cueballr, has submitted on 26/05/2008 a cross-site-scripting XSS vulnerability affecting www.femina.in, which at the time of submission ranked 229799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currentl...

Unfixed XSS vulnerability at www.bit.ge

Security researcher pSyChOmOnkee, has submitted on 14/05/2008 a cross-site-scripting XSS vulnerability affecting www.bit.ge, which at the time of submission ranked 4500704 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2008. It is...

Unfixed XSS vulnerability at thehipp.org

Security researcher xylitol, has submitted on 14/05/2008 a cross-site-scripting XSS vulnerability affecting thehipp.org, which at the time of submission ranked 1005795 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is currently...

CVE-2008-2181

Multiple cross-site scripting XSS vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 searchtext and 2 searchcategory parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtain...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 searchtext and 2 searchcategory parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtain...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...