CVE-2008-3448

Cross-site scripting XSS vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

[~] Greetz : Me93fg & Mr.SaFa7

csphonebook 1.02 Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ o | My Email : [email protected] |/ / | Name Script : csphonebook 1.02 Download :...

common Solutions csphonebook 1.02 - index.php Cross-Site Scripting

common Solutions csphonebook 1.02 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30485/info The 'csphonebook' program from common solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

common Solutions csphonebook 1.02 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30485/info The 'csphonebook' program from common solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

csphonebook-xss.txt

csphonebook 1.02 Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : csphonebook 1.02 Download :...

CVE-2008-2795

The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...

elinestudio-sqlxss.txt

www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...

Sql injection

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

CVE-2008-2530 concerns multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS. The issues allow remote attackers to inject SQL via specific parameters: nr to frontend/news.php; id to frontend/events3.php and frontend/videos2.php; y to frontend/events2.php; and ser to frontend/f...

zina-traverse.txt

---------------------------------------------------------------- ----------------------In The Name Of God------------------------ ---------------------------------------------------------------- Script : Zina 1.0rc3 Type : Remote Directory Traversal Vulnerability & XSS Vulnerability...

Meto Forum 1.1 - Multiple SQL Injections

Meto Forum 1.1 - Multiple SQL Injections -------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL Ä°injectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

Security Advisory for Bugzilla 3.0.3, 3.1.3, 2.22.3, and 2.20.5

Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers three security issues that have recently been fixed in the Bugzilla code: Users without the "canconfirm" privilege could enter a bug as NEW or ASSIGNED by using the XML-R...

Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes Authentication to Database Server...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

KLA10375 WLF vulnerability in UltraEdit

A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products UltraEdit CVE list CVE-2008-27...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

Sql injection

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...