Unfixed XSS vulnerability at www.kurdiplace.nl

Security researcher Killer-TR, has submitted on 08/11/2010 a cross-site-scripting XSS vulnerability affecting www.kurdiplace.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

PT-2010-4293 · Zabbix · Zabbix

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 1.8.3rc1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the formatQuery function. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...

Unfixed XSS vulnerability at www.europeesplatform.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.europeesplatform.nl, which at the time of submission ranked 3231093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It...

Unfixed XSS vulnerability at www.eur.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.eur.nl, which at the time of submission ranked 43943 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www.kunsthal.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.kunsthal.nl, which at the time of submission ranked 1506200 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at www.bondtegenvloeken.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.bondtegenvloeken.nl, which at the time of submission ranked 17887346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. I...

Unfixed XSS vulnerability at www.albeda.nl

Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.albeda.nl, which at the time of submission ranked 710170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

CMSQLite / CMySQLite 1.3 - Cross-Site Request Forgery

Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect for freelancers, self-employeds, clubs and...

Jax Calendar v1.34 Remote Permission Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= Jax Calendar v1.34 Remote Permission Bypass Vulnerability ========================================================= FOUND BY: R4M! - email protected DORK: inurl:?do=editentry SCRIPT: Ja...

TR Forum 1.5 - Multiple Vulnerabilities

TR Forum 1.5 - Multiple Vulnerabilities ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2...

TR Forum 1.5 Cross Site Scripting / SQL Injection

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

TR Forum 1.5 - Multiple Vulnerabilities

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

TR Forum 1.5 insert admin CSRF Vulnerability

Exploit for php platform in category web applications ============================================ TR Forum 1.5 insert admin CSRF Vulnerability ============================================ ======================================================================================== | Title : TR Forum...

Unfixed XSS vulnerability at www.zadkine.nl

Security researcher Killer-TR, has submitted on 04/10/2010 a cross-site-scripting XSS vulnerability affecting www.zadkine.nl, which at the time of submission ranked 894788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at www.mediatv.nl

Security researcher Killer-TR, has submitted on 04/08/2010 a cross-site-scripting XSS vulnerability affecting www.mediatv.nl, which at the time of submission ranked 485935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection ========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability =========================================...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...