Bractus SunTrack Multiple XSS

Vendor: Bractus http://bract.us Product: SunTrack http://bract.us/demo/login.jsp Multiple stored XSS vulnerabilities exist in the Bractus SunTrack courier software suite. Affected scripts: newprofile.html title parameter signup/signup.html firstname, lastname, company parameter contact.html...

Arab Portal 2.x SQL Injection

getqc &&!isset$apt-getqp $qc = $apt-getqc; $result = $apt-query"select name,comment from rafiacomment where id='$qc'"; $row = $apt-dbarray$result; $apt-row'quote' = "\n\n\nQUOTE..... :".$row'name'."\n".$row'comment'."/QUOTE"; /code - Debug : code $qc = intval$apt-getqc; /code - Note : Path to...

Mob oLyrics Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

[InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities

AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your website. Built using PHP/MYSQL, Ad...

CVE-2008-6717

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

CVE-2008-6717

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

CVE-2008-6717

CVE-2008-6717 affects U&M Software Signup 1.0 and 1.1. The issue is that administrative authentication is not required for all scripts in the admin/ directory, allowing remote attackers to access sensitive admin endpoints (adminstart.php, admineventtype.php, admineventdetails.php, admineventlist....

CVE-2008-6717: Improper Authentication

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

Availscript Article Script Remote File Upload Vulnerability

Exploit for unknown platform in category web applications =========================================================== Availscript Article Script Remote File Upload Vulnerability =========================================================== Availscript Article Script Remote File Upload Vulnerability...

U&M Software Signup 1.1 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

UM Software Signup 1.1 - Authentication Bypass

UM Software Signup 1.1 - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

U&M Software Signup 1.1 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================= U&M Software Signup 1.1 Auth Bypass Vulnerability ================================================= ============================================================================== U&M Softwa...

U&M Software Signup 1.1 - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

Unfixed XSS vulnerability at signup.0catch.com

Security researcher Uber0n, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting signup.0catch.com, which at the time of submission ranked 10822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/04/2008. It is current...

Availscript Jobs Portal Script File Upload Vulnerability (auth)

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload

AvailScript Jobs Portal Script - Authenticated Arbitrary File Upload || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of...

Availscript Jobs Portal Script File Upload Vulnerability (auth)

Exploit for unknown platform in category web applications =============================================================== Availscript Jobs Portal Script File Upload Vulnerability auth ===============================================================...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...