PHPMyRealty 1.0.x - 'search.php' SQL Injection

xaker.name & grabberz.com . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name...

Unfixed XSS vulnerability at www.expressddl.com

Security researcher Uber0n, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.expressddl.com, which at the time of submission ranked 83759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2003-1536

Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...

Unfixed XSS vulnerability at www.yogawiz.com

Security researcher CoNqUeRoR, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.yogawiz.com, which at the time of submission ranked 404635 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

CVE-2003-1498

CVE-2003-1498 is an XSS vulnerability in WRENSOFT Zoom Search Engine, affecting version 2.0 Build 1018 and earlier. The vulnerability arises from improper handling of the zoom_query parameter in search.php, allowing remote attackers to inject arbitrary web script or HTML. The available documents ...

Unfixed XSS vulnerability at www.kde-files.org

Security researcher S0m.Ph, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.kde-files.org, which at the time of submission ranked 416012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

CVE-2002-2255

The CVE-2002-2255 entry describes an XSS vulnerability in phpBB 2.0.3 and possibly earlier versions. The issue enables remote attackers to inject arbitrary web script or HTML via the search_username parameter in the searchuser mode, potentially compromising user sessions or data integrity. Accord...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

multicart-sql.txt

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

MultiCart 1.0 - Blind SQL Injection

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

MultiCart 1.0 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ MultiCart 1.0 Remote Blind SQL Injection Exploit ================================================ Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remo...

Unfixed XSS vulnerability at www.axsys.com

Security researcher WhatALegend, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.axsys.com, which at the time of submission ranked 1542276 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.cvwd.org

Security researcher xeno3dx, has submitted on 19/09/2007 a cross-site-scripting XSS vulnerability affecting www.cvwd.org, which at the time of submission ranked 3650508 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

Unfixed XSS vulnerability at 1-look.org

Security researcher www.r3t.n3t.nl, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting 1-look.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...

Unfixed XSS vulnerability at srash.com

Security researcher kusomiso.com, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting srash.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.bb-chat.tv

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.bb-chat.tv, which at the time of submission ranked 30655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.gopuglia.it

Security researcher Langy, has submitted on 30/08/2007 a cross-site-scripting XSS vulnerability affecting www.gopuglia.it, which at the time of submission ranked 1177650 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is currentl...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...

CVE-2007-4453

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...