Cross site scripting

Cross-site scripting XSS vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Crlf injection

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTPREFERER parameter...

CVE-2007-3685

Cross-site scripting XSS vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-3686

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTPREFERER parameter...

CVE-2007-3685

CVE-2007-3685 affects the Unobtrusive Ajax Star Rating Bar (rpc.php). The issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML via the q parameter in rpc.php, for versions before 1.2.0. The vulnerability is described across multiple sources as XSS in ...

CVE-2007-3684

Affected software: Unobtrusive Ajax Star Rating Bar before 1.2.0. Root cause: SQL injection in the (1) q and (2) t parameters in (a) db.php and (b) rpc.php. Impact: remote attackers can execute arbitrary SQL commands. Mitigation: upgrade to version 1.2.0 or later (apply patch).

CVE-2007-3686

The CVE-2007-3686 entry describes a CRLF injection vulnerability in the Unobtrusive Ajax Star Rating Bar prior to 1.2.0. The flaw occurs in db.php and allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter. Public references corroborate ...

Unfixed XSS vulnerability at www.starwars.gen.tr

Security researcher jims, has submitted on 21/05/2007 a cross-site-scripting XSS vulnerability affecting www.starwars.gen.tr, which at the time of submission ranked 1069379 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/05/2007. It is...

Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit

Exploit for unknown platform in category dos / poc ============================================================== Netrek 2.12.0 pmessage2 Remote Limited Format String Exploit ============================================================== Luigi Auriemma Application: Netrek http://www.netrek.org...

Netrek 2.12.0 - 'pmessage2()' Remote Limited Format String

Luigi Auriemma Application: Netrek http://www.netrek.org Versions: \0\0\0"; strcatfromstr, me-pmapc...

CVE-2006-6643

Fightersoft Multimedia Star FTP server 1.10 is affected by a remote-denial-of-service vulnerability described as: the server can crash when handling multiple RETR commands with long arguments. This CVE entry (CVE-2006-6643) is documented with an impact of partial availability disruption. The prov...

CVE-2006-6643

Fightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service crash via multiple RETR commands with long arguments...

Star FTP Server 1.10 (RETR) Remote Denial of Service Exploit

No description provided by source. Star FTP server 1.10 Bug type: stack overflow Found by Necro neco ihack.pl http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro necroihack.pl http://iHACK.pl' host = '127.0.0.1...

Star FTP Server 1.10 - 'RETR' Remote Denial of Service

Star FTP server 1.10 Bug type: stack overflow Found by Necro http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro http://iHACK.pl' host = '127.0.0.1' port = 21 username = 'necro' password = 'dupa' evil = 'RETR' ...

Star FTP Server 1.10 (RETR) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ Star FTP Server 1.10 RETR Remote Denial of Service Exploit ============================================================ Star FTP server 1.10 Bug type: stack overflow Found by Necro...

Star FTP Server 1.10 - RETR Remote Denial of Service

Star FTP Server 1.10 - RETR Remote Denial of Service Star FTP server 1.10 Bug type: stack overflow Found by Necro http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro http://iHACK.pl' host = '127.0.0.1' port = 2...

HIOXS Star Rating System Addcode.PHP远程文件包含漏洞

HIOXS Star Rating System是一款基于PHP的WEB应用程序。 HIOXS Star Rating System不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 问题是'Addcode.PHP'脚本对用户提交的'hm'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以进程权限执行任意指令。 hscripts HIOX Star Rating System 1.0 http://www.hscripts.com/scripts/php/starrating.php...

CVE-2006-6154

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...

CVE-2006-6155

Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script HSRS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ipadd or 2 url parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from thi...

CVE-2006-6156

Cross-site scripting XSS vulnerability in auth/message.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF. NOTE: The provenance of this information is unknown; the details are obtained solely from...