toplist-xss.txt

LiderHack.Org script name : PhpBB Toplist 1.3.7 Dork : toplist.php?f=toplistnew Risk : High Found By : St@rExT Vulnerable file : Toplist.php New add sites addres: toplist.php?f=toplistnew Name: xss code & Information: xss code & Name: Your name & Name: alert"yourmessage" example sites :...

asg-rfi.txt

LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...

vtforum-13.txt

LiderHack.Org script name : Vt-Forum Lite System V.1.3 Script Download : http://aspindir.com/indir.asp?id=585 Risk : High Found By : St@rExT Thanks : Dekolax , ShaFuck31 , ST@ReXT , Dekolax , SwatHack , Maverick , Candark , Torlaq , Woheras , Siruas Vulnerable file : vfinfo.asp XSS Bug:...

aspee.txt

LiderHack.Org Script name : Aspee Ziyaretçi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

Solaris 9 (sparc) : 117201-09

X11 6.6.1: st patch. Date this patch was last updated by Sun : Feb/23/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid23531;...

Aix execve /bin/sh 88 bytes

No description provided by source. / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x90610438 , 0x3c602f73 , 0x60636801 ...

cahierSQL.txt

Cahier de textes Pierre Lemaitre - St Lô France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit http://localhost/PATH/lire.php?classeID=1&matiereID=SQL or http://localhost/PATH/lireafaire.php?classeID=SQL expemle of sql code to get admin user and password...

Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...

CVE-2006-3037

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

CVE-2006-3037

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

CVE-2006-3037

ST AdManager Lite (publish.php) has multiple XSS vulnerabilities disclosed, allowing remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters. The description specifies the affected software/component and the vulnera...

CVE-2006-3037: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, 3 article, 4 bio, and 5 name parameters...

CVE-2006-1076: Undefined Security Weakness

SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board IPB 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2005-3395

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2005-3395: Undefined Security Weakness

SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2005-1070: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter...

Invision Power Board 1.x - 'ST' SQL Injection

source: https://www.securityfocus.com/bid/13097/info Invision Power Board is reported prone to an SQL injection vulnerability. Due to improper filtering of user-supplied data, attackers may pass SQL statements to the underlying database through the 'st' parameter. Invision Power Board 1.3.1 and...