180 matches found
OrbitHYIP 2.0 signup.php referral Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17766/info OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
CVE-2014-4187
CVE-2014-4187 affects ClipBucket: a cross-site scripting (XSS) vulnerability in signup.php, exploitable via the Username field. The underlying issue is improper input handling in the user signup flow, allowing injected scripts/HTML to be executed in the context of affected sessions. The OpenVAS e...
CVE-2014-4187: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...
ClipBucket CMS Cross Site Scripting
@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...
CVE-2013-4951: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 pass parameter in views/login.php or 3 name or 4 pass parameter in views/signup.php...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2011-5190: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
PHPDug 2.0.0 Cross Site Scripting
´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...
CVE-2008-2428: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...
Unfixed XSS vulnerability at www.new.fm
Security researcher kInGoFcHaOs, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.new.fm, which at the time of submission ranked 93070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...
Unfixed XSS vulnerability at www.rapidcounter.com
Security researcher st@rext, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.rapidcounter.com, which at the time of submission ranked 247323 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFLFILEROOT parameter to 1 admin.php, 2 custompages.php, 3 draft.php, 4 faq.php, 5 leagues.php, 6 livedraft.php, 7 login.php, 8 myteam.php, 9 profile.php, 10...
CVE-2007-4333
CVE-2007-4333 describes multiple cross-site scripting (XSS) vulnerabilities in signup.php of Article Dashboard. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters f_emailaddress, f_reemailaddress, and other unspecified fields. Connected sources corroborate...
CVE-2007-4333: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-4077: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...
Unrestricted file upload
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg...
CVE-2007-3429: Undefined Security Weakness
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg...
e107 <= 0.7.8 (photograph) Arbitrary File Upload Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title e107 = 0.7.8 - Arbitrary File Upload...
Remote file inclusion
PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use...