calvertracing.com XSS vulnerability

Vulnerable URL: http://www.calvertracing.com/gallery/usergallery.php?make=1/-///'/"//--...

WBB3 rGallery 1.2.3 (UserGallery) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= WBB3 rGallery 1.2.3 UserGallery Blind SQL Injection Exploit ============================================================= !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1;...

WBB3 rGallery 1.2.3 - 'UserGallery' Blind SQL Injection

!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q WBB3 Blind SQL-Injector Exploit in rGallery by Invisibility \\ Special greetz to // Katharsis//nobody \\ Gunner//Cheese // Thx ; ; if @ARGV 3 print "Usage: wbb3sploit.pl url user id User Gallery userID \nExample: wbb3sploit.pl...

WBB3 rGallery 1.2.3 (UserGallery) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q WBB3 Blind SQL-Injector Exploit in rGallery by Invisibility \\\ Special greetz to // Katharsis//nobody \\\ Gunner//Cheese // Thx ; ; if @ARGV 2 print "Usage: wbb3sploit.pl url user id User...

CVE-2007-6309

Multiple cross-site scripting XSS vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the galleryID parameter in a usergallery upload action; or the 2 upID, 3 tag, 4 month, 5 userID, or 6 year parameter in a calendar announce action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the galleryID parameter in a usergallery upload action; or the 2 upID, 3 tag, 4 month, 5 userID, or 6 year parameter in a calendar announce action...

CVE-2007-6309

Multiple cross-site scripting XSS vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the galleryID parameter in a usergallery upload action; or the 2 upID, 3 tag, 4 month, 5 userID, or 6 year parameter in a calendar announce action...

webspell-xss.txt

Autor: Brainhead Type: XSS Version: 4.01.02 Files: usergallery.php, calendar.php Magic Quotes :off Examples: http://site.tld/PATH/index.php?site=usergallery&action=upload&galleryID="your code http://site.tld/PATH/index.php?site=calendar&action=announce&upID="your code...