CVE-2009-0533

CVE-2009-0533 describes a Cross-site scripting (XSS) vulnerability in password.php of Scripts for Sites EZ Reminder, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors (possibly involving the u2 parameter). NVD/SEC data assign a CVSS v2 base score of 4.3 (Medium) wi...

CVE-2009-0532

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

SA-CONTRIB-2009-006 - Troll - Cross site request forgeries

The Troll module provides management tools for community sites to deal with badly behaved users, known as "trolls", including banning users by IP address, advanced user searching, and blocking users by role. The module does not properly implement the Drupal Form API which makes it vulnerable to...

CVE-2009-0532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

psoam-ddxss.txt

--------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

team 1.x - File Disclosure / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

FreeBSD -- Cross-site request forgery in ftpd(8)

Problem Description: The ftpd8 server splits long commands into several requests. This may result in the server executing a command which is hidden inside another very long command. Impact: This could, with a specifically crafted command, be used in a cross-site request forgery attack. FreeBSD...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Sites can change framed content on other sites

Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to open pages from other...

Design/Logic Flaw

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...

sfseztopsites-sql.txt

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Sql injection Script : SFS EZ Top Sites Remote sql Injection Home Script : http://www.scripts-for-sites.info/item.php?item=112 Greetz : Allah , All my freind...

SFS EZ Gaming Directory (cat_id) Remote SQL Injection Vulnerability

No description provided by source. Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Gaming Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=112 D0rk : "sie g...

SFS EZ Auction (viewfaqs.php cat) Blind SQL Injection Vulnerability

No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c :...

SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability

No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Sql injection Script : SFS EZ Top Sites Remote sql Injection Home Script : http://www.scripts-for-sites.info/item.php?item=112 Greetz : Allah , All my freind...

sfsezhome-sql.txt

Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Home Business Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=113 D0rk : "sie go. amk işinizmi yok xD" SQL...

SFS EZ Hosting Directory (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== SFS EZ Hosting Directory catid Remote SQL Injection Vulnerability ==================================================================== Author : BeyazKurt LAHEY mahkemesin...

SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== SFS EZ Hot or Not phid Remote SQL Injection Vulnerability ===========================================================...