CVE-2007-3974

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters...

Unfixed XSS vulnerability at www.baesystems.com

Security researcher Darkster, has submitted on 25/07/2007 a cross-site-scripting XSS vulnerability affecting www.baesystems.com, which at the time of submission ranked 104071 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed Redirect vulnerability at rebels.redux-angel.org

Security researcher Narcoticxs, has submitted on 18/07/2007 a Redirect vulnerability affecting rebels.redux-angel.org, which at the time of submission ranked 2198799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/08/2007. It is currently...

Unfixed XSS vulnerability at xinxinyi.com.cn

Security researcher DerickTham, has submitted on 07/12/2007 a cross-site-scripting XSS vulnerability affecting xinxinyi.com.cn, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is currently...

Unfixed XSS vulnerability at secure.royalquiz.com

Security researcher Uber0n, has submitted on 07/12/2007 a cross-site-scripting XSS vulnerability affecting secure.royalquiz.com, which at the time of submission ranked 1208965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is...

Unfixed XSS vulnerability at www.grindstore.com

Security researcher systemmeltdown, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.grindstore.com, which at the time of submission ranked 136048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It ...

Unfixed XSS vulnerability at billing.invisiblehand.net

Security researcher BackDoor, has submitted on 07/09/2007 a cross-site-scripting XSS vulnerability affecting billing.invisiblehand.net, which at the time of submission ranked 352377 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It...

Unfixed XSS vulnerability at www.mailordergarden.com

Security researcher BackDoor, has submitted on 07/09/2007 a cross-site-scripting XSS vulnerability affecting www.mailordergarden.com, which at the time of submission ranked 4620990 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It ...

Unfixed XSS vulnerability at search3.fact-finder.de

Security researcher Darkster, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting search3.fact-finder.de, which at the time of submission ranked 90028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at gallery.dfx.org

Security researcher KaBuS, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting gallery.dfx.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. It is currently...

Unfixed XSS vulnerability at search.tycoelectronics.com

Security researcher Hotpockets, has submitted on 24/06/2007 a cross-site-scripting XSS vulnerability affecting search.tycoelectronics.com, which at the time of submission ranked 60312 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/06/2007. ...

Unfixed XSS vulnerability at community.fxnetworks.com

Security researcher Hotpockets, has submitted on 15/06/2007 a cross-site-scripting XSS vulnerability affecting community.fxnetworks.com, which at the time of submission ranked 33874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/06/2007. It...

Unfixed XSS vulnerability at hide-d.com

Security researcher kusomiso.com, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting hide-d.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2007. It is currently...

Unfixed XSS vulnerability at marmotfarm.com

Security researcher kusomiso.com, has submitted on 06/11/2007 a cross-site-scripting XSS vulnerability affecting marmotfarm.com, which at the time of submission ranked 685006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2007. It is...

Unfixed XSS vulnerability at www.xbox360fanboy.com

Security researcher Mutant, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting www.xbox360fanboy.com, which at the time of submission ranked 16942 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is...

RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability

An interesting SQL injection vulnerability was discovered in CubeCart v3.0.16. This vulnerability cannot easily be exploited by traditional means - in fact, the actual vulnerable variable was not discovered. As a piece of user input is passed to CubeCart, it is sanitized through a routine mySQLSa...

Unfixed XSS vulnerability at www.worldshakesbib.org

Security researcher MaXWeL, has submitted on 24/05/2007 a cross-site-scripting XSS vulnerability affecting www.worldshakesbib.org, which at the time of submission ranked 1986481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is...

cisco-input.txt

Cisco CallManager 4.1 Input Validation Vulnerability scip AG Vulnerability ID 2977 03/13/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2977 I. INTRODUCTION Cisco CallManager, short CCM, is a professional voice-over-IP solution that tracks active components, including among others phones,...

Unfixed XSS vulnerability at c-library.um.ac.ir

Security researcher Hotpockets, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting c-library.um.ac.ir, which at the time of submission ranked 29535 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is...

tomcat accept-language xss flaw

Cross-site scripting XSS vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 2616"...