1340 matches found
MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23676/info MoinMoin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...
CVE-2007-0928
The CVE-2007-0928 issue concerns Virtual Calendar where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download an encoded password via a direct request for pwd.txt, indicating improper access restrictions on sensitive files. Reported...
ovidentia5x-rfi.txt
Author : H0tTurk- Author2: Hotturk web app : OVidentia 5.x Series Remote File İnclude My Site : WwW.H0tTurk.CoM Referance:http://www.securityfocus.com/archive/1/456893 Thanx : DrmaxVirus,GencTurk,Madconfig,EnjexioN,TiT,Kurtefendy,LuciferCihan,Arabian-FighterZ,Sawturk,Ayyıldız,OzelHarekatTim...
CVE-2006-6977
CVE-2006-6977 affects FreeTextBox’s Basic Toolbar Selection. The vulnerability is a cross-site scripting flaw in the A tag where a javascript: URI in href or onmouseover can be used to run arbitrary JavaScript in a remote context. Affected component is the toolbar’s HTML output; the underlying is...
CVE-2006-6954
The CVE-2006-6954 entry affects Flock beta 1 0.7, where a remote attacker can cause a denial of service (application crash) by delivering a web page that contains a large number of nested marquee tags. This vulnerability is related to CVE-2006-2723. The provided documents do not specify a remedia...
CVE-2007-0156
The CVE-2007-0156 entry concerns M-Core where the application stores its database under the web document root, enabling information disclosure if an attacker directly requests db/uyelik.mdb. Affected component: the database file accessed via the web root; root cause: improper placement of the dat...
EditTag 1.2 - edittag_mp.pl?file Arbitrary File Disclosure
EditTag 1.2 - edittagmp.pl?file Arbitrary File Disclosure source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
shopsite-xss.txt
Hackers Center Security Group http://www.hackerscenter.com/ Doz's Security Advisory Desc: ShopSite Shopping Cart Multiple XSS Risk: Medium ShopSite is the easiest-to-use shopping cart software for small to medium-sized businesses. ShopSite ecommerce shopping cart is one of the most user-friendly...
Enthrallweb eClassifieds - ad.asp Multiple SQL Injections
Enthrallweb eClassifieds - ad.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues coul...
Car Site Manager - '/csm/asp/listings.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...
XSS Vulnerability in Zend Framework Preview 0.2.0
Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0009 Status: Partial Date: 2006/11/03 Summary: Armorize-ADV-2006-0009 discloses cross-site scripting vulnerability that is found in the sample codes of Zend Framework http://framework.zend.com/, which aims to provide a complet...
SQL Injection Vulnerability in bfExplorer 0.0.6
Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0007 Status: Partial Date: 2006/10/31 Summary: Armorize-ADV-2006-0007 discloses SQL injection vulnerability that is found in bfExplorer BytesFall Explorer, http://sourceforge.net/projects/bfexplorer, which is is a web-based fi...
Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5
Full Disclosure Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Status: Full Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a...
Directory Traversal Vulnerability in Goop Gallery 2.0.2
Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0004 Status: Partial Date: 2006/10/04 Bugtraq No.: N/A Summary: Armorize-ADV-2006-0004 discloses a special case of directory traversal vulnerability found in Goop Gallery, which is is a directory based photo gallery and does n...
Multiple XSS Vulnerabilities in Zen Cart 1.3.5
Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0003 Date: 2006/9/27 Summary: Armorize-ADV-2006-0003 discloses multiple cross-site scripting vulnerabilities that are found in Zen Cart, which is a PHP e-commerce shopping program and is Built on a foundation of OScommerce GPL...