2682 matches found
Adobe ColdFusion Server 8.0.1 - wizardscommon_authenticatewizarduser.cfm Query String Cross-Site Scripting
Adobe ColdFusion Server 8.0.1 - wizardscommonauthenticatewizarduser.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before usin...
Discuz! 6.0 - 2fly_gift.php SQL Injection
Discuz! 6.0 - 2flygift.php SQL Injection source: https://www.securityfocus.com/bid/36044/info Discuz! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
ViArt Helpdesk - reviews.php?category_id Cross-Site Scripting
ViArt Helpdesk - reviews.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
SpiceWorks - 'query' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43248/info Spiceworks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
PHP Photo Vote 1.3F - page Cross-Site Scripting
PHP Photo Vote 1.3F - page Cross-Site Scripting source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...
ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
No description provided by source. / ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC "Based on: http://www.securityfocus.com/data/vulnerabilities/exploits/35848.txt by kingcope - this is basically a rewrite of the above, lame i know, but fun enough for the zone argument you can try...
ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
Exploit for multiple platform in category dos / poc ============================================================== ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC ============================================================== / ISC BIND 9 Remote Dynamic Update Message Denial of...
VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow
/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...
68 Classifieds 4.1 - toplistings.php Cross-Site Scripting
68 Classifieds 4.1 - toplistings.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
ZNC < 0.072 File Upload Directory Traversal Vulnerability
ZNC is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
MyDLstore Pixel Ad Script - payment.php Cross-Site Scripting
MyDLstore Pixel Ad Script - payment.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43448/info MyDLstore Pixel Ad Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion
source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...
PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection
source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...
Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection
source: https://www.securityfocus.com/bid/43710/info Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit...
V-webmail Multiple PHP Remote File Inclusion Vulnerability
V-webmail is prone to Multiple PHP Remote File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AIOCP 1.4 - cp_html2txt.php Remote File Inclusion
AIOCP 1.4 - cphtml2txt.php Remote File Inclusion source: https://www.securityfocus.com/bid/35811/info AIOCP All In One Control Panel is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...
PG Roommate Finder Solution - quick_search.php?part Cross-Site Scripting
PG Roommate Finder Solution - quicksearch.php?part Cross-Site Scripting source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...
AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities
AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to...
[Full-disclosure] [NETRAGARD SECURITY ADVISORY] [< Safari 3.2.3 Arbitrary Code Execution + PoC ][NETRAGARD-20090622]
NETRAGARD ADVISORY http://www.netragard.com "The Specialist in Anti- Hacking" Advisory Summary --------------------------------------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Researcher : Kevin Finisterre Advisory ID : NETRAGARD-20090622...