1692 matches found
Unfixed Redirect vulnerability at www.pkkgercegi.net
Security researcher st@rext, has submitted on 28/09/2007 a Redirect vulnerability affecting www.pkkgercegi.net, which at the time of submission ranked 561691 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. I...
Article Directory - 'index.php' Remote File Inclusion
dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace milw0rm.com 2007-07-24...
Unfixed XSS vulnerability at pg.sitebase.net
Security researcher Darkster, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting pg.sitebase.net, which at the time of submission ranked 102131 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...
CVE-2007-3430: Undefined Security Weakness
SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL commands via the submit parameter in an email action...
XOOPS Module icontent 1.0 Remote File Inclusion Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...
CVE-2007-2977
Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to cause a denial of service or have other unspecified impact. NOTE: some of these details are obtained from third party information...
Buffer overflow
Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to cause a denial of service or have other unspecified impact. NOTE: some of these details are obtained from third party information...
CVE-2007-2977
Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to cause a denial of service or have other unspecified impact. NOTE: some of these details are obtained from third party information...
CVE-2007-2977
CVE-2007-2977 affects the DOMjudge submit daemon: the receive function in submit/submitcommon.c has a buffer overflow before version 2.0.0RC1. This condition allows remote attackers to cause a denial of service and potentially other unspecified impact. The description notes that some details are ...
CVE-2007-2977: Undefined Security Weakness
Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to cause a denial of service or have other unspecified impact. NOTE: some of these details are obtained from third party information...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...
S-Gastebuch <= 1.5.3 (gb_pfad) Remote File Include Exploit
No description provided by source. S-G鋝tebuch //'=============================================================================================== //'Script Name: S-G鋝tebuch //'Dork Ex. : http://www.google.com.tr/search?q=VS-G%C3%A4stebuch+V.+%C2%A9&hl=tr&start=10&sa=N //'S.Page :...
Unfixed Redirect vulnerability at www.ngsoft.it
Security researcher Renoized, has submitted on 01/10/2007 a Redirect vulnerability affecting www.ngsoft.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is currently unfixed. If you...
AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities
No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...
CVE-2006-6452
Multiple cross-site scripting XSS vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 topics.php, 2 submit.php, and 3 class/calendar.class.php...
E Annu 1.0 Login Bypass SQL Injection Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleE Annu 1.0 Login Bypass SQL Injection Exploit/title script language="JavaScript"...
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...
Cross site scripting
Cross-site scripting XSS vulnerability in submitarticle.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets CSS property of a STYLE attribute of an...
CVE-2006-1590: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...
PHPSelect Submit-A-Link - HTML Injection
PHPSelect Submit-A-Link - HTML Injection source: https://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...