CVE-2007-6002

Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...

CVE-2007-6002

Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...

CVE-2007-6002

CVE-2007-6002 describes a cross-site scripting (XSS) vulnerability in Fenriru Sleipnir (≤ 2.5.17 R2) and Grani (≤ 3.0). The flaw allows remote attackers to inject arbitrary web script or HTML via the Search field when performing a search for additions to the Favorites section. The connected docum...

Simple Machine Forum - Private section/posts/info disclosure

Vulnerable: Simple Machine Forum ALL Versions Tested on SMF 1.1.4 Type: Private Section,Posts,Information disclosure. Risk: Low / Medium Discovered By Seph1roth Site: http://www.blackroots.it - The Best Hacking site. eng / ita Explanation: If some section is rescricted only for staff,vips or...

aleris-sql.txt

http://www.alerisdata.com/articles/home.asp There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.13 aka Sunglow allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Section Name form fields in the Section Manager component, or 3 multiple unspecified fields in New Menu Item...

CVE-2007-5577

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.13 aka Sunglow allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Section Name form fields in the Section Manager component, or 3 multiple unspecified fields in New Menu Item...

CVE-2007-5577

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.13 aka Sunglow allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Section Name form fields in the Section Manager component, or 3 multiple unspecified fields in New Menu Item...

CVE-2007-5577

CVE-2007-5577 affects Joomla! (pre-1.0.13, aka Sunglow). The vulnerability allows remote XSS via the Section Manager’s Title/Section Name fields and multiple fields in New Menu Item, enabling injection of arbitrary script/HTML. Affected component/versions are stated; impact is client-side script ...

CVE-2007-5487

Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file...

Unfixed XSS vulnerability at www.thirdage.com

Security researcher Darkster, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting www.thirdage.com, which at the time of submission ranked 46001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It is...

CVE-2007-5059

Multiple cross-site scripting XSS vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several vectors, as demonstrated by the 1 uname and 2 pass parameters in a login form, and 3 an unspecified "url value," leading to storage of XSS sequences in the...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section...

CVE-2007-4779

Cross-site scripting XSS vulnerability in Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section...

CVE-2007-4779

Cross-site scripting XSS vulnerability in Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section...

Joomla! 1.5 Beta1/Beta2/RC1 - SQL Injection

!/usr/bin/php -q -d shortopentag=on getPageParameters; switch $params-get'filtertype', 'title' case 'title' : $where .= ' AND LOWER a.title LIKE '%'.$filter.'%''; break; case 'author' : $where .= ' AND LOWER u.name LIKE '%'.$filter.'%' OR LOWER a.createdbyalias LIKE '%'.$filter.'%' '; break;...

Unfixed XSS vulnerability at www.unicycle.com

Security researcher KURDISHMOD, has submitted on 20/05/2007 a cross-site-scripting XSS vulnerability affecting www.unicycle.com, which at the time of submission ranked 220478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/05/2007. It is...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

CVE-2007-1974

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section aka WF-Sections 1.0.1, as used in Xoops modules such as 1 Zmagazine 1.0, 2 Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via...

CVE-2007-1974

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section aka WF-Sections 1.0.1, as used in Xoops modules such as 1 Zmagazine 1.0, 2 Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via...