CVE-2008-3334

Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...

CVE-2008-3334

Summary (CVE-2008-3334) : A cross‑site scripting (XSS) vulnerability exists in MyBB 1.2.x prior to 1.2.14 . The issue arises from insufficient input validation in certain parameters handled by the search path (likely including search.php), allowing remote attackers to inject arbitrary script/HTML...

CVE-2008-3334: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...

Unfixed XSS vulnerability at www.rue-des-puzzles.com

Security researcher Sheiry, has submitted on 26/07/2008 a cross-site-scripting XSS vulnerability affecting www.rue-des-puzzles.com, which at the time of submission ranked 266850 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is...

Unfixed XSS vulnerability at www.cmclb.com

Security researcher LeBaNeSe-XsSeR, has submitted on 17/07/2008 a cross-site-scripting XSS vulnerability affecting www.cmclb.com, which at the time of submission ranked 4922562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/07/2008. It is...

Directory traversal

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

CVE-2008-3128

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

CVE-2008-3128

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

CVE-2008-3128: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

Unfixed XSS vulnerability at www.unidir.ch

Security researcher Tec-n0x, has submitted on 07/05/2008 a cross-site-scripting XSS vulnerability affecting www.unidir.ch, which at the time of submission ranked 1825542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currentl...

Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit

No description provided by source. ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net...

Pivot 1.40.5 - Dreamwind load_template() Credentials Disclosure

Pivot 1.40.5 - Dreamwind loadtemplate Credentials Disclosure ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind'...

Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Pivot 1.40.5 Dreamwind loadtemplate Credentials Disclosure Exploit ===================================================================== ?php / Pivot 1.40.5 'Dreamwind'...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2008-2694

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2008-2694: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Sql injection

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via 1 the q parameter to search.php, or the n parameter to 2 user.php or 3 uss.php...

CVE-2008-2668

Multiple cross-site scripting XSS vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php, or the n parameter to 2 user.php or 3 uss.php...

CVE-2008-2668

CVE-2008-2668 : The provided documents identify multiple cross-site scripting (XSS) vulnerabilities in the web application yBlog 0.2.2.2 . The vulnerabilities can be triggered by user-supplied input in the following parameters: (1) the q parameter to search.php, and (2) the n parameter to either ...

CVE-2008-2669: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via 1 the q parameter to search.php, or the n parameter to 2 user.php or 3 uss.php...