1926 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...
CVE-2009-2882
Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...
Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection
------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0 Language: PHP Site:...
CVE-2009-2127
Cross-site scripting XSS vulnerability in showactivity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
动网论坛(DVBBS)Show.asp页面过滤不严导致跨站漏洞
文件show.asp中： filetype=Request"filetype" //第75行 username=Request"username" …… TempStr = ReplaceTempStr,"$username",UserName //第244行 程序对于输出变量filetype和username过滤导致xss漏洞的产生。 DVBBS 8.0.0-8.2.0 厂商补丁 DVBBS ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dvbbs.net...
PT-2009-4245 · Ulteo · Ulteo Open Virtual Desktop
Name of the Vulnerable Software and Affected Versions: Ulteo Open Virtual Desktop version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several API endpoints, including...
Directory traversal
Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the show parameter...
DEW-NEWphpLinks 2.0 XSS / LFI
------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l...
Vulnerability showboating is for amateurs
It’s like one of those magic candles people place on birthday cakes that sparkle and relight themselves each time you think they’ve been blown out. That’s how I’d define the most recent ignition of the “bugs for cash” debate. By now you’ll have probably heard that Dino Dai Zovi, Charlie Miller an...
The Ryan & Roel Show Episode 9
Adobe vs. Microsoft on Security Response – Fri, March 6, 2009 Ryan and Roel discuss the latest zero-day vulnerabilities and attacks affecting Adobe and Microsoft customers and compare the response from the two software vendors. Download episode...
The Ryan & Roel Show Episode 8
The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...
The Ryan & Roel Show Episode 1
Welcome to the Show – Mon, October 20 2008 In this show, we introduce ourselves and recap the Virus Bulletin 2008 conference. We talk about the MBR Trojan bootkit, the controversy surrounding anti-virus testing standards, information on the blackmarket for online gaming passwords and some data fr...
Directory traversal
Directory traversal vulnerability in show.php in ol'bookmarks manager 0.7.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...
SkyPortal Picture Manager 0.11 Contents Change Vulnerability
No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal Pictur...
mtvyouthicon.in.com SQL Injection
==================================================================== Website: http://mtvyouthicon.in.com/ Category: TV Show Reality Show - Online Voting Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...
biggboss2 SQL Injection
==================================================================== Website: http://biggboss2.in.com/ Category: TV Show Vulnerability: Inband SQL Injection Founder: Jaydeep [email protected] Date: 16th Feb, 2009 ==================================================================== == P O C...
Directory traversal
Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, in conjunction with a show action...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
