Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery / Cross-Site Scripting

Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its self against all of these...

Sql injection

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5864

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5864

CVE-2008-5864 affects the Joomla! Hotel Booking Reservation System (HBS) component com_tophotelmodule, version 1.0.0, with the affected package described as Top Hotel. The root cause is an SQL injection vulnerability in the showhoteldetails action (index.php) triggered via the id parameter. This ...

CVE-2008-5864

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

Joomla Top Hotel Module SQL Injection

Joomla Component comtophotelmoduleid Blind SQL-injection Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Top Hotel Module ! 06/07/2008 ! Joomla HBS ! [email protected] !...

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

sfseztopsites-sql.txt

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Sql injection Script : SFS EZ Top Sites Remote sql Injection Home Script : http://www.scripts-for-sites.info/item.php?item=112 Greetz : Allah , All my freind...

SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability

No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Sql injection Script : SFS EZ Top Sites Remote sql Injection Home Script : http://www.scripts-for-sites.info/item.php?item=112 Greetz : Allah , All my freind...

SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== SFS EZ Top Sites topsite.php ts Remote SQL Injection Vulnerability ==================================================================== Kira has decide be back after...

SFS EZ Top Sites - SQL Injection

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Sql injection Script : SFS EZ Top Sites Remote sql Injection Home Script : http://www.scripts-for-sites.info/item.php?item=112 Greetz : Allah , All my freind...

Monster Top List Remote File Include

The remote web server contains a PHP application that is affected by a remote file include vulnerability. Description : The remote host is running Monster Top List, a site rating script written in PHP. The installed version of Monster Top List fails to sanitize user input to the 'rootpath'...

Monster Top List Remote File Include

The remote web server is running Monster Top List which is affected by a remote file include vulnerability. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 2797b27a-f55b-11d8-81b0-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-3170

Technical details about CVE-2008-3170 are not publicly available in the provided connected documents; monitor for updates.

Top Auction Pro (category) Remote SQL Injection Vulnerability

No description provided by source. Top Auction SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email:...

Cross site scripting

Cross-site scripting XSS vulnerability in the Top Referrers aka referrer plugin in Serendipity S9Y before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header...

CVE-2008-1385

Cross-site scripting XSS vulnerability in the Top Referrers aka referrer plugin in Serendipity S9Y before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header...

CVE-2008-1385

CVE-2008-1385 is an XSS vulnerability in Serendipity's Top Referrers (referrer) plugin prior to 1.3.1. The referrer string is not escaped, allowing injection via the Referer header and leading to arbitrary script/HTML execution. The issue is documented with a CVSS v2 base score of 4.3 (Medium). R...

CVE-2008-1385: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Top Referrers aka referrer plugin in Serendipity S9Y before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header...