Cmscout <= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...

canbypass.txt

google hack: "Powered by Candidate Resources Inc." I MurderSkillz from g00ns.net have found a auth bypass in Candidate Resources Inc. web software. Looks like there are different places on websies to login. Works for the login pages. Not much you can do but displays the admins info in the edit us...

Widget Imprint SQL inj. vuln.

Widget Imprint SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html Vendor:http://www.widgetpress.com/products?product=wimprint affected version: 1.0.26 and prior Product Description: Database driven web...

Cabletron Web View Administrative Access (HTTP)

This host is a Cabletron switch and is running Cabletron WebView. This web software provides a graphical, real-time representation of the front panel on the switch. This graphic, along with additionally defined areas of the browser interface, allow you to interactively configure the switch, monit...

calendarix.txt

/ Advisorie : 01-0005-15 title: multiple vulnerability Software: Calendarix Advanced Date: 28. April 2005 Web: http://www.calendarix.com/ / - Affected software description: Webcalendar is a web software write in php y mysql - Expoit: Include line 16 admin/caladmintop.php:includeonce...