3678 matches found
ContentDM Search.php XSS Vulnerability
ContentDM has a XSS vulnerability. Many .gov sites run this software. CDM fails to block special charachters etc so by searching for scriptalert'XSS';/script We can make a popup saying XSS. An attacker could steal cookies, redirect the page etc. Found by MeRhys Phillips Date found: 3rd August 200...
DynamicData(dms)Document&Article Script /dm_browse.asp.asp sql injection
DynamicDatadmsDocument&Article Script /dmbrowse.asp.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam all members thx 3APA3A spec.note : "Live The Life" 1- example.com/patch/dmbrowse.asp?pid=sql methot 1-...
php123-sql.txt
--==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Browse...
Sql injection
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2007-4054
CVE-2007-4054 is a SQL injection vulnerability in PHP123 Top Sites affecting category.php via the cat parameter. The vulnerability enables remote attackers to alter SQL commands due to improper input handling in the affected function, allowing access to or manipulation of the database. The NVD en...
CVE-2007-4054
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter...
PHP123 Top Sites (category.php cat) Remote SQL Injection Vuln
No description provided by source. --==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
PHP123 Top Sites - category.php?cat SQL Injection
PHP123 Top Sites - category.php?cat SQL Injection --==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...
PHP123 Top Sites - 'category.php?cat' SQL Injection
--==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Browse...
data: URLs can spoof trusted trusted sites – Opera Security Advisories
data: URLs can spoof trusted trusted sites – Opera Security Advisories OPCOM Team | July 19, 2007 Summary Opera displays certain data: URLs wrongly, enabling URL spoofing. Severity: Moderately severe Problem description data: URLs embed data inside them, instead of linking to an externalresource...
MSIE7 entrapment again (+ FF tidbit)
Hello again, Microsoft Internet Explorer seems to have a soft spot for browser entrapment vulnerabilities. Just to recap, in these attacks, the user is made believe he had left a webpage and the URL bar or SSL state data reinforce him in this belief - but in reality, is prevented from doing so, a...
Microsoft .NET Framework PE加载器远程溢出漏洞（MS07-040）
BUGTRAQ ID: 24778 CVECAN ID: CVE-2007-0041 Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework PE加载器处理包含畸形数据的PE文件时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 .NET Framework...
GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability
No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...
GameSiteScript 3.1 - profile id SQL Injection
GameSiteScript 3.1 - profile id SQL Injection GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...
Multiple vulnerabilities in all variants of MySQLDumper
Multiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues. Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: a TYPO3 extension...
PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities
-------------------------------------------------- PhpOpenChat = 3.0.1 poc.php Multiple Remote File Include Vulnerabilities -------------------------------------------------- Author : SekoMirza Date Found : Nisan 11 2007 Location : Fransa // ... Critical Lvl : Highly critical Impact : System acce...
Opera / Firefox anti-phishing protection bypass
Phishing sites embedded into IFRAME are not detected...
Design/Logic Flaw
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens...
CVE-2007-1652
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens...
