TR Forum 1.5 - Multiple Vulnerabilities

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

TR Forum 1.5 Cross Site Scripting / SQL Injection

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

TR Forum 1.5 insert admin CSRF Vulnerability

Exploit for php platform in category web applications ============================================ TR Forum 1.5 insert admin CSRF Vulnerability ============================================ ======================================================================================== | Title : TR Forum...

Unfixed XSS vulnerability at www.zadkine.nl

Security researcher Killer-TR, has submitted on 04/10/2010 a cross-site-scripting XSS vulnerability affecting www.zadkine.nl, which at the time of submission ranked 894788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at www.mediatv.nl

Security researcher Killer-TR, has submitted on 04/08/2010 a cross-site-scripting XSS vulnerability affecting www.mediatv.nl, which at the time of submission ranked 485935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection ========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability =========================================...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Unfixed XSS vulnerability at www.partyscene.nl

Security researcher Killer-TR, has submitted on 29/11/2009 a cross-site-scripting XSS vulnerability affecting www.partyscene.nl, which at the time of submission ranked 374204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

Unfixed XSS vulnerability at www.roc.nl

Security researcher Killer-TR, has submitted on 23/11/2009 a cross-site-scripting XSS vulnerability affecting www.roc.nl, which at the time of submission ranked 203895 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...

Unfixed XSS vulnerability at www.militair.net

Security researcher Killer-TR, has submitted on 16/10/2009 a cross-site-scripting XSS vulnerability affecting www.militair.net, which at the time of submission ranked 1397070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

Unfixed XSS vulnerability at www.gemlikkorfezgazetesi.com

Security researcher Fix TR, has submitted on 10/08/2009 a cross-site-scripting XSS vulnerability affecting www.gemlikkorfezgazetesi.com, which at the time of submission ranked 949655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. I...

Unfixed XSS vulnerability at www.spele.nl

Security researcher Killer-TR, has submitted on 13/09/2009 a cross-site-scripting XSS vulnerability affecting www.spele.nl, which at the time of submission ranked 13590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...

Unfixed Script Insertion vulnerability at techworld.nl

Security researcher Killer-TR, has submitted on 09/05/2009 a Script Insertion vulnerability affecting techworld.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently unfixed. If...

Unfixed Script Insertion vulnerability at turkanow.nl

Security researcher Killer-TR, has submitted on 25/08/2009 a Script Insertion vulnerability affecting turkanow.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed. If...

Unfixed Script Insertion vulnerability at www.msnfreaksz.nl

Security researcher Killer-TR, has submitted on 24/08/2009 a Script Insertion vulnerability affecting www.msnfreaksz.nl, which at the time of submission ranked 13217308 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currently...