Truecaller.com Cross Site Scripting

WhiteHatZone Vulnerable : http://www.truecaller.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://www.truecaller.com/?p=numbersearch&country=India-Ahmedabad&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E&x=17&y=10 Greetz : Vidit Baxi, Sumit...

SA-CONTRIB-2011-033 - iWebkit - Cross Site Scripting

iWebKit is a web toolkit designed to create iPhone and iPod touch compatible websites and webapps. iWebkit does not properly sanitize menu links when displayed, allowing a malicious user to embed scripts in menu items, thus creating a cross site scripting XSS vulnerability that may lead to an...

[SA19061] MyBB "comma" Parameter SQL Injection Vulnerability

TITLE: sendcard Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19056 VERIFY ADVISORY: http://secunia.com/advisories/19056/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: sendcard 3.x http://secunia.com/product/5427/ DESCRIPTION: Sumit...