Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 427BB 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to a register.php, b reminder.php, and c search.php; the 2 uname, 3 email, and 4 email2 parameters to register.php; the 5 email parameter to...

427BB 2.3.1 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

427bb 2.3.1 - SQL Injection / Cross-Site Scripting

============================================================ 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

426bb-sqlxss.txt

============================================================ 427BB 2.3.1 SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

smeweb-sqlxss.txt

======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Tea...

smeweb 1.4b - SQL Injection Cross-Site Scripting

smeweb 1.4b - SQL Injection Cross-Site Scripting ======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergrou...

SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ===================================================== ======================================================= SMEweb 1.4b SQL/XSS...

CVE-2008-2453

CVE-2008-2453 affects the PHP Classifieds Script, with two SQL injection flaws: the fatherID parameter in browse.php and search.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Impact is described as remote arbitrary SQL execution with partial confidentiality/i...

Unfixed XSS vulnerability at www.femina.in

Security researcher cueballr, has submitted on 26/05/2008 a cross-site-scripting XSS vulnerability affecting www.femina.in, which at the time of submission ranked 229799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currentl...

Unfixed XSS vulnerability at www.bit.ge

Security researcher pSyChOmOnkee, has submitted on 14/05/2008 a cross-site-scripting XSS vulnerability affecting www.bit.ge, which at the time of submission ranked 4500704 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2008. It is...

Unfixed XSS vulnerability at thehipp.org

Security researcher xylitol, has submitted on 14/05/2008 a cross-site-scripting XSS vulnerability affecting thehipp.org, which at the time of submission ranked 1005795 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is currently...

CVE-2008-2181

Multiple cross-site scripting XSS vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 searchtext and 2 searchcategory parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtain...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 searchtext and 2 searchcategory parameters. NOTE: the XSS reportedly occurs in a forced SQL error message. NOTE: some of these details are obtain...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2127

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2127

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

Sphider 1.3.4 - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29074/info Sphider is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Unfixed XSS vulnerability at planetlotus.org

Security researcher .virex, has submitted on 05/04/2008 a cross-site-scripting XSS vulnerability affecting planetlotus.org, which at the time of submission ranked 795466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/04/2008. It is currentl...

Unfixed XSS vulnerability at www.gopetition.com

Security researcher Azat Harutyunyan, has submitted on 30/04/2008 a cross-site-scripting XSS vulnerability affecting www.gopetition.com, which at the time of submission ranked 25543 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It...