CVE-2009-4461: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 contact.php, 2 login.php, and 3 search.php...

vBulletin - Denial of Service

vBulletin - Denial of Service !/c:/perl/bin VBulletin Denail of Service Exploit by 4.!.5 created : !N 7h3 DARKNESS CODED BY: R3d-D3V!L important = Image Verification in search.php is NOT Enabled. It tested on V3.6.3 Perl Script use Socket; if @ARGV \n"; print "\tex: $0 127.0.0.1 /forum/\n"; print...

Info Fisier 1.0 XSS / SQL Injection

Author : kaozc9 + Email : [email protected] + Site : www.paradisextem.co.cc + Team : ParadisexTeam + Dork : Powered by Info Fisier. =========================================XSS================================================== Affected Files: http://server/path/search.php...

Pragyan CMS 2.6.4 Remote File Inclusion

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/pragyan/pragyan/2.6.4/pragyan-2.6.4.tar.gz registerglobals...

CommonSense CMS XSS Vulnerability

No description provided by source. Exploit Title: CommonSense CMS XSS Vulnerability Date: December 29th, 2009 Author: Sora Software Link: http://www.sensesites.com/ Version: 1.0 Tested on: Windows and Linux Backtrack 3 ---------------------------------------------------- CommonSense CMS XSS...

phpBB 2.0.4,2.0.9 search.php 跨站脚本执行漏洞

No description provided by source...

Info Fisier 1.0 multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Info Fisier 1.0 multiple Vulnerabilities ======================================== + Dork : Powered by Info Fisier...

info fisier 1.0 - Multiple Vulnerabilities

info fisier 1.0 - Multiple Vulnerabilities + Author : kaozc9 + Email : [email protected] + Site : www.paradisextem.co.cc + Team : ParadisexTeam + Dork : Powered by Info Fisier. =========================================XSS================================================== Affected Files:...

lineaCMS - Cross-Site Scripting

lineaCMS Cross Site Scripting Vulnerability Author : Phenom vendor : http://www.lineaphp.net language : PHP Dork : Powered by lineaCMS © 2006 lineaPHP Group Exploit : 1- http://server/path/search.php 2- type here your XSS...

Pragyan CMS 2.6.4 (Search.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability ================================================================== Script Information: Scipt: Pragyan CMS...

Pragyan CMS 2.6.4 (Search.php) Remote File Inclusion Vulnerability

No description provided by source. Author: Author: Mr.SeCreT E-mail: [email protected]:[email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 lastusername and 2 mod parameters to index.php; and 3 the title parameter to...

CVE-2009-4249

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 lastusername and 2 mod parameters to index.php; and 3 the title parameter to...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...

CVE-2009-4266: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in YABSoft Advanced Image Hosting AIH Script 2.2, and possibly 2.3, allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2009-4249: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 lastusername and 2 mod parameters to index.php; and 3 the title parameter to...

CVE-2009-4175: Exposure of Sensitive Information to an Unauthorized Actor

CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the fromdateday parameter to search.php, which reveals the installation path in an error message...