Unfixed XSS vulnerability at www.clarechampion.ie

Security researcher eX0dus, has submitted on 20/06/2007 a cross-site-scripting XSS vulnerability affecting www.clarechampion.ie, which at the time of submission ranked 1347349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2007. It is...

Unfixed XSS vulnerability at pd.charlotte.com

Security researcher zuppergazi, has submitted on 16/06/2007 a cross-site-scripting XSS vulnerability affecting pd.charlotte.com, which at the time of submission ranked 13659 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2007. It is...

Unfixed XSS vulnerability at community.iexplore.com

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting community.iexplore.com, which at the time of submission ranked 22664 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is...

Unfixed XSS vulnerability at de.searchuk.com

Security researcher zuppergazi, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting de.searchuk.com, which at the time of submission ranked 311260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Sql injection

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

CVE-2006-0911

NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...

TYPSoft FTP Server 1.10 multiple vulnerabilities

Application: TYPSoft FTP Server http://www.typsoft.com/ Version: 1.10 Bug: + multiple vulnerabilities Denial Of Service + 100 employment of computer resources Author: intuit e-mail: intuitatlinuxmail.org web: http://rootshells.tk/ greetz to: tgs ; 1. Description 2. The bug 3. The code 4. The fix...

WEBgais 1.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/2058/info WEBgais is a script that provides a web interface to the "gais" Global Area Intelligent Search search engine tool. All versions up to 1.0B2 are vulnerable. The vulnerable script is /cgi-bin/webgais: due to improper input checking it allows a...