iGreeting Cards 1.0 - SQL Injection

Exploit Title: iGreeting Cards 1.0 - SQL Injection Dork: N/A Date: 04.09.2017 Vendor Homepage: http://coryapp.com/ Software Link: http://coryapp.com/?product&index Demo: http://coryapp.com/demo/greetingcards/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author:...

UF FE /flex/newsmessage. jsp parameter uname injection vulnerability

No description provided by source...

CVE-2016-2995

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-300...

PT-2016-5678 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 2.3 Jenkins LTS versions prior to 1.651.2 Description: The issue allows remote authenticated users to inject arbitrary build parameters into the build environment via environment variables. This can be achieved by...

CVE-2010-5007

Cross-site scripting XSS vulnerability in pages/matchreport.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter...

shopv8 v10. 8 4 Mall system injection vulnerability-vulnerability warning-the black bar safety net

Go from: http://t00ls.net/thread-13776-1-1.html authors:Vagabond wind, I only do the layout, deletions, and additions. Vulnerability name: shopv8 Mall system v10. 8 4 injection vulnerability Article author: wandering wind Author Blog: http://www.st999.cn/blog Vulnerability file: list. asp Learn t...

phpbb 2.0.8 admin-board.php Sql注入

No description provided by source...

FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability

No description provided by source. FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHO...

Cross site scripting

Cross-site scripting XSS vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4568

Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.framesn.document.open, which facilitates spoofing and other attacks...

Mantis < 0.19.3 Multiple Injection Vulnerabilities

Binary data 3173.prm...

Coppermine < 1.4.23 injection

Binary data 5028.prm...

FreeBSD : Mutiple browser frame injection vulnerability (83) (deprecated)

The remote host is missing an update to the system The following package is affected: firefox This plugin has been deprecated since the advisory has been canceled. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been cancelled. Disabled on 2015/11/30. C...

[Full-Disclosure] injection html CuteNews

Original Advisory: http://www.darkbicho.iberhosting.net/advisory-11.txt ------------------------------------------------------------------------------------------------- :.: injection html CuteNews :.: PROGRAM: CuteNews HOMEPAGE: http://cutephp.com/ VERSION: v1.3.x BUG: injection html DATE:...

oracleXSS.txt

Software: Oracle HTTP Server Powered by Apache Vendor: http://www.apache.com http://www.oracle.com Versions: Oracle HTTP Server Powered by Apache/1.3.22 Win32 modplsql/3.0.9.8.3b modssl/2.8.5 OpenSSL/0.9.6b modfastcgi/2.2.12 modoprocmgr/1.0 modperl/1.25 Platforms: Windows Bug: Cross Site Scriptin...