Adobe bitten by XSS bug it invented

Hundreds of thousand websites host vulnerable Adobe Flash files which can be exploited by malicious people to conduct convincing phishing and XSS attacks. In most cases, cookie hijacking is possible. Unsuspecting users can be redirected from trustworthy SSL and non-SSL sites to malware, adware an...

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com MRCGIGU...

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling ---------------------------------------------------------------...

MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ====================================================== MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln ====================================================== --------------------------------------------------------------- MRCGIGUY T...

MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N...

Sql injection

SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6794

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794

CVE-2008-6794 refers to a SQL injection vulnerability in the file directory.php of Scripts For Sites (SFS) EZ Pub Site. The vulnerability allows an attacker to execute arbitrary SQL commands through the cat parameter, enabling remote access to the database according to the NVD description. Relate...

Sql injection

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6776

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6782

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-6784

CVE-2008-6784 is a SQL injection vulnerability affecting directory.php in Scripts For Sites (SFS) EZ Adult Directory. The vulnerable parameter is cat_id in a list action, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the issue and provide references,...

CVE-2008-6776

CVE-2008-6776 affects Scripts For Sites (SFS) EZ Hot or Not, specifically the viewcomments.php component. The issue is a SQL injection via the phid parameter, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple feeds (NVD and related listin...

CVE-2008-6780

The CVE-2008-6780 entry describes an SQL injection vulnerability in directory.php of Scripts for Sites (SFS) EZ Affiliate. The issue allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. No version-specific details are provided in the documents. Publ...

CVE-2008-6776

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6784

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Update Protection against Oracle Application Server BPEL Module Cross Site Scripting

Oracle Application Server is vulnerable to cross-site scripting due to lack of validation of user supplied data. Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw may be exploited by attackers to execute arbitrary...

ECShop 2.5.0 (order_sn) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== ECShop 2.5.0 ordersn Remote SQL Injection Vulnerability ==========================================================...

Update Protection against Oracle Application Server 10g OPMN Service Format String Vulnerability

A vulnerability was reported in Oracle Application Server, a multi-platform solution for developing and deploying enterprise applications and web sites. The flaw is due to insufficient validation of the URI part of HTTP requests. Remote attackers could exploit this vulnerability by sending a...

Cybergangs use cheap labor to break codes on social sites

From USA Today Byron Acohido It’s become the new front in cybercrime: scams and identity-theft programs that attack e-mail accounts and users of social-networking sites such as Facebook and MySpace. To carry out many of these automated attacks, cybercriminals first must overcome “captchas,” the...