407 matches found
Unfixed XSS vulnerability at www.fiyatara.com
Security researcher Sr., has submitted on 09/11/2007 a cross-site-scripting XSS vulnerability affecting www.fiyatara.com, which at the time of submission ranked 56055 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is currently...
Unfixed XSS vulnerability at www.bilyap.com.tr
Security researcher Sr., has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.bilyap.com.tr, which at the time of submission ranked 356757 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
Microsoft PowerPoint NamedShows record code execution
Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...
APBoard 2.2-r3 <= SQL Injections
APBoard 2.2-r3 = SQL Injections - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Discovered by: 666 SR-Crew Homepage: www.SR-Crew.de.tt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Vendor: APBoard from APP Homepage: www.php-programs.de - - - - - - - - - - - - - - - - - -...
ThWboard 3.0 <= SQL Injection
// ThWboard 3.0 = SQL Injection // ----------------------------------------------------------------- Advisory by: SR-Crew - Exploit: http://www.example.com/showtopic.php?threadid=1&pagenum=SQL - Googledork: - + Greetz to: BlueGeek.de + Visit: www.SR-Crew.de.tt...