495 matches found
WordPress W3 Total Cache Data Disclosure
!/bin/bash C Copyright 2012 Jason A. Donenfeld . All Rights Reserved. |---------------| | W3 Total Fail | | by zx2c4 | |---------------| For more info, see built-in help text. Most up to date version is available at: http://git.zx2c4.com/w3-total-fail/tree/w3-total-fail.sh This affects all curren...
Unfixed XSS vulnerability at w3.u-grenoble3.fr
Security researcher Atmon3r, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting w3.u-grenoble3.fr, which at the time of submission ranked 293797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...
Amaya Web Editor 11.0 - Remote Buffer Overflow (PoC)
!/usr/bin/perl -w Amaya Web Editor "."\n". ''."\n". "Heap"."\n". ""; my $file="St.html"; $exploit = $code.$bof.$bof2.$bof3.$coding; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $exploit ; close$FILE; print "$file has been created \n"; milw0rm.com 2009-01-29...
Unfixed XSS vulnerability at w3.meer.net
Security researcher xylitol, has submitted on 23/10/2008 a cross-site-scripting XSS vulnerability affecting w3.meer.net, which at the time of submission ranked 210848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/11/2008. It is currently...
CVE-2008-4573
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter...
CVE-2008-4573
CVE-2008-4573 describes an SQL injection in kategori.asp of MunzurSoft Wep Portal W3, exploitable via the kat parameter to execute arbitrary SQL. The issue is web-facing (attack vector: network) with a base score of 7.5 (high) per NVD, indicating partial confidentiality, integrity, and availabili...
MunzurSoft Wep Portal W3 (kat) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== MunzurSoft Wep Portal W3 kat SQL Injection Vulnerability ========================================================== Author : LUPUS...
Cross site scripting
Cross-site scripting XSS vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the top-level URI...
CVE-2008-0146
Cross-site scripting XSS vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the top-level URI...
CVE-2008-0146
CVE-2008-0146 is an XSS in the error page of W3-mSQL. The vulnerability allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the top-level URI. Affected component is the error handling of W3-mSQL; root cause details and exact vulnerable versions are not explicitly provi...
CVE-2008-0146
Cross-site scripting XSS vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the top-level URI...
xss in w3-msql error page
A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...
W3-mSQL - Error Page Cross-Site Scripting
W3-mSQL - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/27116/info W3-mSQL is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...
W3-mSQL - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/27116/info W3-mSQL is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
w3msql-xss.txt
A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...
Unfixed XSS vulnerability at w3.netbenefit.co.uk
Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting w3.netbenefit.co.uk, which at the time of submission ranked 45589 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is...
Unfixed XSS vulnerability at w3.falun.se
Security researcher Uber0n, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting w3.falun.se, which at the time of submission ranked 551916 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...
CVE-1999-1469
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with 1 a long URL, or 2 a long User-Agent MIME header...
CVE-1999-1469
The vulnerability CVE-1999-1469 stems from a buffer overflow in the w3-auth CGI program within the miniSQL package. An attacker can remotely execute arbitrary commands by sending an HTTP request with a long URL or a long User-Agent header. The CVSS data indicates a network attack vector with low ...