eGov Content Manager Cross Site Scripting Vulrnability

HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...

boinc-xss.txt

HSC Boinc Forum Cross Site Scripting Vulrnability This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Invision Power Board D22-Shoutbox HTML Injections

HSC Invision Power Board D22-Shoutbox HTML Injections D22-Shoutbox suffers from improper validation of HTMl tags filtration. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the...

phpeventcal-sql.txt

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

csc-sqlxss.txt

--- Comersus Shop Cart 7.07 SQL Injection & XSS Comersus is an active server pages asp software for running shopping stores, integrated with the rest of your web site. Comersus ASP Cart is free and IT CAN BE used for commercial purposes. An attacker may leverage this issue to have arbitrary scrip...

CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files

CSIS Security Group has discovered an "Integer division by zero" flaw in the GDI+ component in Windows XP. This condition are activated when a malformed ICO file are viewed through either Windows Explorer or other components like "Windows Picture and Fax Viewer". The consequence of this flaw is a...

MyShoutBox Multiple Cross-Site Scripting Vulnerability

A Shoutbox is a new interaction possiblity for visitors to your site! With a Shoutbox, site visitors develop a durable, personal relationship with your homepage. Customer relations is indispensable for today's websites. Hackers Center Security Group http://www.hackerscenter.com Credit: Doz Risk:...

InstantForum.NET Multiple Cross-Site Scripting Vulnerability

InstantForum.NET Multiple Cross-Site Scripting Vulnerability ASP.NET based discussion forum. Full administration, WYSIWYG editor, Permission based forum access, Assign forum moderators, VS.NET solution available. InstantForum.NET is the most comprehensive, high performance ASP.NET & SQL Server...

instant-xss.txt

InstantForum.NET Multiple Cross-Site Scripting Vulnerability ASP.NET based discussion forum. Full administration, WYSIWYG editor, Permission based forum access, Assign forum moderators, VS.NET solution available. InstantForum.NET is the most comprehensive, high performance ASP.NET & SQL Server...

sitecatalyst-xss.txt

Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: SiteCatalyst Web Login Cross Site Vulrnabilities Risk: Medium Omniture, Inc aims its aperture at your Web site. The company provides Internet analytic software and services to corporate customers such as AOL...

siapcms-sql.txt

login.asp username Sql Injection Attack ' or 'x'='x dork: com.ve/login.asp vendor: www.redbinaria.com greetz: Dario Struz And G74 Security Group...

Siap Cms Sql Injection (login.asp)

login.asp username Sql Injection Attack ' or 'x'='x dork: com.ve/login.asp vendor: www.redbinaria.com greetz: Dario Struz And G74 Security Group...

Opial Audio/Video Download Management - Version 1.0 index.php Xss vulns.

web application : Opial Audio/Video Download Management Version : 1.0 site : http://www.opial.com ------------------------------------------------ Exploit : --------- http://www.example.com/path/index.php?view=Login&destination=xss ------------------------------------------------ Dicovered : by...

PhotoStore Multiple Cross-Site Scripting Vulnerabilities

PhotoStore Multiple Cross-Site Scripting Vulnerabilities ------------------------------------------------- site : http://www.ktools.net/photostore/ ------------------------------------------------- Exploiting these issues could allow an attacker to steal cookie-based authentication credentials an...

eSyndiCat Portal System XSS Vuln.

eSyndiCat Portal System has an xss bug in search.php can be exploited from web interface http://www.example.com/path/search.php?what=xss&searchtop.x=0&searchtop.y=0&searchtop=GO -------------------- Discovered by meto5757 Rootshell Security Group...

MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...

MailEnable Enterprise Edition ASP Version <= 2.0

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disab...

acFTP FTP Server <= 1.4 (USER) Remote Buffer Overflow PoC

No description provided by source. ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl ip use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A" x 4700; if$ARGV0...

acFTP FTP Server 1.4 - USER Remote Buffer Overflow (PoC)

acFTP FTP Server 1.4 - USER Remote Buffer Overflow PoC ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A"...

acFTP FTP Server 1.4 - 'USER' Remote Buffer Overflow (PoC)

===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A" x 4700; if$ARGV0 == "" print "\n"; print " ===== acFtp...