CVE-2006-2052

Cross-site scripting XSS vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the...

Cartweaver ColdFusion vuln.

Cartweaver ColdFusion vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.cartweaver.com affected versions:2.16.11 and previous orginal advisory:http://pridels.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html Vuln. Description: 1. SQL Injection vuln. Cartweaver ColdFusion...

X-Cart SQL inj. vuln.

X-Cart SQL inj. vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://www.x-cart.com/ affected versions: X-Cart Gold v4.0.18 X-Cart Pro v4.0.18 X-Cart 4.1.0 beta 1 and prior versions also can be affected . orginal advisory:...

[SA19727] @1 Event Publisher Multiple Vulnerabilities

TITLE: @1 Event Publisher Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19727 VERIFY ADVISORY: http://secunia.com/advisories/19727/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: @1 Event Publisher...

phpLDAPadmin multiple vuln.

phpLDAPadmin multiple vuln. Vuln. discovered by : r0t Date: 21 april 2006 vendorlink:http://phpldapadmin.sourceforge.net/ affected versions:phpLDAPadmin 0.9.8 and prior orginal advisory: http://pridels.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html Vuln. Description: phpLDAPadmin contains a...

phpMyAdmin XSS vuln.

phpMyAdmin XSS vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://www.phpmyadmin.net/ affected versions: phpMyAdmin 2.8.0.3 phpMyAdmin 2.8.0.2 phpMyAdmin 2.8.1-dev CVS version phpMyAdmin 2.9.0-dev CVS version and prior versions also can be affected orginal advisory:...

Net Clubs Pro XSS vuln

Net Clubs Pro XSS vuln Vuln. discovered by : r0t Date: 20 april 2006 vendor:www.aasimedia.com/nc/nc.shtml affected versions:4.0 and prior orginal advisory: http://pridels.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html Vuln. Description: Net Clubs Pro contains a flaws that allows a remote cross...

AWStats 6.5.x multiple vuln.

AWStats 6.5.x multiple vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://awstats.sourceforge.net/ affected versions: 6.5 build 1.857 and prior orginal advisory: http://pridels.blogspot.com/2006/04/awstats-65x-multiple-vuln.html Vuln. Description: 1. Cross-Site Scripting AWStat...

Visale XSS vuln.

Visale XSS vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendor:http://www.visale.com/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2006/04/visale-xss-vuln.html Vuln. Description: Visale contains a flaw that allows a remote cross site scripting attack. Th...

[SA19654] Boardsolution "keyword" Cross-Site Scripting Vulnerability

TITLE: Boardsolution "keyword" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19654 VERIFY ADVISORY: http://secunia.com/advisories/19654/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Boardsolution 1.x...

Plexum X5 SQL vuln.

Plexum X5 SQL vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:http://www.plexum.com/network/ affected versions:X5 and previous orginal advisory:http://pridels.blogspot.com/2006/04/plexum-x5-sql-vuln.html Vuln. Description: Plexum contains a flaw that allows a remote sql injection...

[SA19685] PMTool "order" SQL Injection Vulnerabilities

TITLE: PMTool "order" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19685 VERIFY ADVISORY: http://secunia.com/advisories/19685/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PMTool 1.x http://secunia.com/product/9419/ DESCRIPTION: Pratiksha Doshi has...

CommuniMail XSS vuln.

CommuniMail XSS vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendor:http://www.sibsoft.net/communimail.html affected versions: 1.2 and previous orginal advisory: http://pridels.blogspot.com/2006/04/communimail-xss-vuln.html Vuln. Description: IntelliLink Pro contains a flaw that allows a...

ModernBill multiple SQL inj. vuln.

ModernBill multiple SQL inj. vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendor:www.moderngigabyte.com product link: www.moderngigabyte.net/modernbill/index.htm?ref=homeofmodernbill affected versions:4.3.2 and previous orginal advisory:...

xFlow v5.x multiple vuln.

xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...

BluePay Manager v2.0 Script Insertion Vulnerability

BluePay Manager v2.0 Script Insertion Vulnerability Vuln. discovered by : r0t Date: 18 april 2006 vendor:bluepay.com affected versions:v2.0 and previous orginal advisory: http://pridels.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html Vuln. description: Input passed to the "Account...

phpLinks <= 2.1.3.1 XSS vuln.

phpLinks = 2.1.3.1 XSS vuln. Vuln. discovered by : r0t Date: 16 april 2006 vendorlink:http://sourceforge.net/projects/phplinks/ affected versions:phpLinks 2.1.3.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/phplinks-2131-xss-vuln.html Vuln. Description: phpLinks contains a...

Musicbox vuln.

Musicbox vuln. Vuln. discovered by : r0t Date: 16 april 2006 vendorlink:http://www.musicboxv2.com/ affected versions:2.3.3 and previous orginal advisory:http://pridels.blogspot.com/2006/04/musicbox-vuln.html Vuln. Description: 1. Input passed to the "term" parameter when performing a search isn't...

osCommerce "extras/" information/source code disclosure

---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, poc:...

osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: in...