JNM Solutions DB Top Sites 1.0 - 'vote.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43699/info JNM Solutions DB Top Sites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

DDoS Attacks Ongoing Against FTC, Other Sites

It looks like the distributed denial-of-service attack, once the favorite tactic of script kiddies and professional hackers alike, is coming back into favor. Attackers have been conducting an ongoing DDoS attack against the Federal Trade Commission’s main site, as well as some other government...

WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability

No description provided by source. WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref =...

WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability ==================================================================== WordPress Plugin Related Sites 2...

Related Sites WordPress Plugin SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 - Blind SQL Injection WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click =...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

Pivot Cross Site Scripting Vulnerability

This host is installed with Pivot and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodpivotxssvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Pivot Cross Site Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com Th...

Directory traversal

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2009-2110

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

Code injection

Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...

CVE-2009-2110

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2009-2111

CVE-2009-2111 affects DB Top Sites 1.0, with a vulnerability in the file add_reg.php that allows static code injection . A remote attacker can inject arbitrary PHP code by supplying crafted parameters for the (1) url and (2) location, enabling code execution on the affected system. This is docume...

CVE-2009-2110

Affected software: DB Top Sites 1.0. Vulnerability type: directory traversal leading to local file inclusion/execution via the u parameter in full.php, index.php, and contact.php when magic_quotes_gpc is disabled. Root cause: directory traversal with .. in the parameter. Impact: remote attackers ...

[InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities

SkyBlueCanvas - XSS and Path Content Disclosure Vulnerabilities Version Affected: 1.1 r237 newest version: 1.1 r246 Info: SkyBlueCanvas Lightweight CMS is an open source, free content management system written in php and built specifically for small web sites. The entire site you are viewing is a...

CVE-2009-2072

Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted 1 4xx or 2 5xx CONNECT response page for an https request sent through a proxy server...

CVE-2009-2070

CVE-2009-2070 describes a vulnerability in Opera where a proxy’s 4xx/5xx CONNECT responses trigger the browser to accept a forged certificate from the proxy in a single request, enabling a man‑in‑the‑middle attack. An attacker could then send a crafted 502 response on a subsequent request to spoo...

DB Top Sites 1.0 - index.php?u Local File Inclusion

DB Top Sites 1.0 - index.php?u Local File Inclusion + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability

No description provided by source. + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

Translucid 1.75 XSS / HTML Injection

transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing list of ready-made, professional...