Unfixed XSS vulnerability at www.cnfla.com

Security researcher MaXWeL, has submitted on 04/03/2007 a cross-site-scripting XSS vulnerability affecting www.cnfla.com, which at the time of submission ranked 49160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is currently...

Unfixed XSS vulnerability at www.gulum.net

Security researcher St@rExT, has submitted on 25/03/2007 a cross-site-scripting XSS vulnerability affecting www.gulum.net, which at the time of submission ranked 7075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/03/2007. It is currently...

Unfixed XSS vulnerability at www.osilo.it

Security researcher Cyber-Unity, has submitted on 20/03/2007 a cross-site-scripting XSS vulnerability affecting www.osilo.it, which at the time of submission ranked 5059868 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/03/2007. It is...

Unfixed XSS vulnerability at www.stylewillsaveus.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.stylewillsaveus.com, which at the time of submission ranked 376622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.allamericanchristmas.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.allamericanchristmas.com, which at the time of submission ranked 2896955 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007...

Unfixed XSS vulnerability at www.markamreklam.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.markamreklam.com, which at the time of submission ranked 8012900 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is...

ShopEx网上商店系统存在严重安全漏洞

ShopEx网上商店系统在处理用户提交数据时，并没有进行严格的过滤，导致恶意用户可以随意攻击系统 所有版本 与官方联系...

eprayer.txt

Eprayer v.Alpha. Homepage: http://eprayer.sourceforge.net Affected files: input boxs of prayer request. User submitted data is not sanatized before being dynamically generated. Try putting the code below in as "Your name" Screenshots: http://www.youfucktard.com/xsp/eprayer1.jpg...

Design/Logic Flaw

Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields"...

CVE-2006-0044

Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields"...

CVE-2006-0044: Undefined Security Weakness

Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields"...

Plogger exploit method! - Vulnerability warning-the black bar safety net

http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...

CVE-2001-1516

Cross-site scripting XSS vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews...

CVE-2001-1516: Undefined Security Weakness

Cross-site scripting XSS vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews...

[waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6]

================================================================================ waraxe-2004-SA024 ================================================================================ XSS and full path disclosure in Network Query Tool 1.6...

YABB information leakage on failed login

YABB is a popular web-based bulletin board system, written in perl and available from http://www.yabbforum.com/. While evaluating it, I found a minor issue where an attacker trying to log in to the forums can extract some useful information making his job easier than it needs to be. Most YABB...

CVE-2001-1516

Cross-site scripting XSS vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews...

bug

Hi, I'm reposting a bug I've found some time before. Thanks WebStore from www.cgicentral.net is a shopping cart allowing users to buy things on-line. One of the scripts in the package, wsmail.cgi unsafely passes user-submitted data to 'system' command: if $in'terminate' eval system"kill $in'kill'...

Bypassing admin authentication in phpWebLog

Note: Although this software is still in beta stage, there are many websites using it, so i think it's a relevant issue. Author: Jason Hines Homepage: http://www.phpweblog.org | http://sourceforge.net/projects/phpweblog/ Version: 0.4.2 others? Problem: in common.inc.php, $CONF is not properly...

Re: rh 6.2 - gid compromises, etc [+ MORE!!!]

Ya know the sad thing is I pointed out these problems in bugzilla posts the gkermit being sgid uucp I reported two+ weeks ago. No response. My description of the gkermit bug which I reported couple weeks ago can be found here: http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=11870 The slrn...