Advisory - Redirection Vulnerability in wp-login.php.

Vendor ------ Wordpress http://www.wordpress.org. Severity -------- Moderate. Dated ----- 03 March 2007. Versions Affected ----------------- All. Issue ----- The wp-login.php page redirects a user to arbitrary page after successful login by setting the redirectto url parameter. For example if a...

[Full-disclosure] Stealing Browser History Without Using JavaScript

In case anyone is interested, I was able to port the old CSS history hacking stuff that Jeremiah Grossman originally found to a version that does not require JavaScript to fire using images and conditional logic built into CSS using a:visited and display attributes. It works in both IE7.0 and...

Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability

On Thu, 15 Feb 2007, pdp architect wrote: I wander whether we can execute code on about:config or about:cache. Actually, there are several odd problems related to location updates and location.hostname specifically, including one scenario that apparently makes the script run with document.locatio...

[Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)

There is an interesting logic flaw in Mozilla Firefox web browser. The vulnerability allows the attacker to silently redirect focus of selected key press events to an otherwise protected file upload form field. This is possible because of how onKeyDown / onKeyPress events are handled, allowing th...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

flashChat 4.7.8 Cross Site Scripting Vulnerability

/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...

flashChat 4.7.8 Cross Site Scripting Vulnerability

/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...

shopsite-xss.txt

Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: ShopSite Shopping Cart Multiple XSS Risk: Medium ShopSite™ is the easiest-to-use shopping cart software for small to medium-sized businesses. ShopSite ecommerce shopping cart is one of the most user-friendly...

JiRos Links Manager[injection sql & xss permanent]

vendor site:http://www.jiros.net/ product:JiRos Links Manager bug: injection sql & xss risk : medium injection sql: /openlink.asp?LinkID='sql /viewlinks.asp?CategoryID='sql xss permanent post: in: /submitlink.asp -Link Name: -Link URL: -Link Image: -Link Description: those xss are really dangerou...

vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues could all...

Small conference middle attack-vulnerability warning-the black bar safety net

Article author: evilangel Information sources:http://safecn. net Man in the middle attacks Man in the Middle as hackers used an ancient means of attack, all the way to today, also has greatly expanded space, because the domestic network structure such attacks still can not be avoided. Since the m...

CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

Hack experience of scratch self-test system vulnerabilities-vulnerability warning-the black bar safety net

The recent hacker attacks occur frequently, our friends also continue to have QQ, E-mail and game account theft incidents. Now the hackers techniques toward popularity direction of the trend, to grasp the attack to others system technology more and more people, as long as your computer is a littl...

SoftBiz Banner Exchange Script 1.0 - lostpassword.php?PHPSESSID Cross-Site Scripting

SoftBiz Banner Exchange Script 1.0 - lostpassword.php?PHPSESSID Cross-Site Scripting source: https://www.securityfocus.com/bid/18735/info Softbiz Banner Exchange is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before displaying i...

Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com http://www.icculus.org/quake3/ Versions: Quake 3 = 1.32c Icculus.org Quake 3 = revision 803 other derived projects Games: exist many games which use the Quake 3 engine and probably they are all vulnerable but I'm not able and ha...

Invision Power Board XSS

//Product :Invision Power Board //Version :2.1.6 and prior versions must be affected. //XSS= http://localhost/forum/admin.php?phpinfo=scriptalert/script //You can steal only admins cookie. //www.spymastersnake.org //[email protected]...

[Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability

Title: Kil13r-SA-20060609-1 Daum Search Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/09 - Discovery 2006/06/09 - Vendor notification 2006/06/09 - Release Affected version: Not affected version: Description: Daum is internet...

File stealing by changing input type (variant) — Mozilla

Chuck McAuley provided Proof-of-Concept code that demonstrates that MFSA 2006-23 was not fixed for all cases. In Firefox 1.5.0.2 it is still possible to pre-fill a text input control with the path to a file at a known location and then change the type of the input control to a file upload control...

GeoBlog MOD_1.0 - viewcat.php Cross-Site Scripting

GeoBlog MOD1.0 - viewcat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17784/info GeoBlog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

File stealing by changing input type — Mozilla

Claus Jörgensen reports that a text input box can be pre-filled with a filename and then turned into a file-upload control with the contents intact, allowing a malicious website the ability to steal any local file whose name they can guess...