483 matches found
CVE-2013-7274
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
Cross site scripting
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
CVE-2013-7274
The CVE-2013-7274 entry documents a Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082, where remote authenticated users can inject arbitrary script/HTML via the title field during a wallpaper file upload. This is caused by insufficient input sanitization in the upload workflow...
CVE-2013-7274
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
PT-2014-3323
Name of the Vulnerable Software and Affected Versions Wallpaper Script version 3.5.0082 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload. This could potentially lead to unauthorized...
CVE-2013-7274: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload...
Wallpaper script "name"跨站脚本漏洞
Wallpaper Script是一个图形平台，可以专业管理壁纸。 Wallpaper script 3.5.0082版本上传或编辑壁纸时"name"参数没有被正确过滤，成功利用后可使远程攻击者插入HTML和脚本代码，然后在用户浏览器会话中执行。 0 Wallpaper Script Wallpaper Script 3.5.0082 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wallpaperscript.com/ Exploit Title : Wallpaper Script Stored XSS...
Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting
Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1...
Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting
Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1 Register and log on as a regular member 2 Click on "Add...
Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges
Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...
Stable Update for Chrome OS
The Stable channel has been updated to 23.0.1271.94 Platform version: 2913.224.0 for all Chrome OS Devices. This build contains a number of new features, bug fixes and security improvements. Machines will be receiving updates over the next several days. Release Highlights: Updated default apps...
Half Million Chinese Android Devices got infected with SMSZombie
The amount of malware crafted and aimed at Android devices is ever-increasing. With Android being the most popular platform for smartphones and tablets around the world, Android users have become the low-hanging fruit when it comes to writing malware by the nefarious users. A new Android threat h...
SMSZombie Malware Infecting Android Devices, Stealing Money
A nasty new piece of malware that has the ability to steal money from users’ via fraudulent SMS payments has shown up in a Chinese Android market and researchers say it’s infected more than 500,000 victims. The SMSZombie malware is being hidden inside apps on the app market and once it’s on a...
Microsoft Windows XP/2000/2003 - Desktop Wall Paper System Parameter Privilege Escalation
// source: https://www.securityfocus.com/bid/35120/info Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will facilitate the complete compromise of affected...
Sql injection
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
CVE-2007-6580
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
CVE-2007-6580
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
CVE-2007-6580
CVE-2007-6580 affects Wallpaper Site 1.0.09 and involves SQL injection in two parameters: (1) catid in category.php and (2) groupid in editadgroup.php. The vulnerability enables remote attackers to execute arbitrary SQL commands. The CVE's NVD entry lists a base score of 7.5 (HIGH) with network a...
CVE-2007-6580: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
wallpaper-sql.txt
. . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name . script name : Wallpaper...