Technote 7.2 - Blind SQL Injection

Technote 7.2 - Blind SQL Injection Exploit Title: technote blind sql injection Google Dork: inurl:/technote7/board.php?board= Date: 2011.06.11 Author: BlueH4G http://blueh4g.org Software Link: http://www.technote.co.kr/php/technote1/board.php?board=consult&command=skininsert&exe=insertdownshop...

Unfixed XSS vulnerability at www.games68.com

Security researcher austinator, has submitted on 05/02/2011 a cross-site-scripting XSS vulnerability affecting www.games68.com, which at the time of submission ranked 121177 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Alcassoft's SOPHIA CMS SQL injection vulnerability-vulnerability warning-the black bar safety net

Alcassoft's SOPHIA is an international, powerful content management system. Alcassoft's SOPHIA in dsppage. cfm file existssql injectionvulnerabilities that could lead to sensitive information disclosure. Title : Alcassoft's SOPHIA CMS is Vulnerable to SQL Injection Found by: p0pc0rn 24/02/2011 We...

Lessons Learned From the LizaMoon SQL Injection Attack

Last week, a large scale SQL Injection attack dubbed LizaMoon, referencing one of the domain names used in the attack, surfaced. This attack targets websites by injecting code that redirects visitors to a rogue anti-virus AV site. While on the AV site, visitors are presented with fake antivirus...

Unfixed XSS vulnerability at www.techgig.com

Security researcher Bhavesh Karodiwal, has submitted on 21/03/2011 a cross-site-scripting XSS vulnerability affecting www.techgig.com, which at the time of submission ranked 17936 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It i...

Unfixed XSS vulnerability at myanmardictionary.co.cc

Security researcher PlanetCreator, has submitted on 14/03/2011 a cross-site-scripting XSS vulnerability affecting myanmardictionary.co.cc, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It i...

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input...

Unfixed XSS vulnerability at directory.northjersey.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting directory.northjersey.com, which at the time of submission ranked 12667 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It i...

Unfixed XSS vulnerability at www.hotelbuk.com

Security researcher h3rcul3s1, has submitted on 19/02/2011 a cross-site-scripting XSS vulnerability affecting www.hotelbuk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Hastymail2 Detection (HTTP)

HTTP based detection of Hastymail2. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801575";...

Unfixed XSS vulnerability at www.givi.com.my

Security researcher VirtualSystEm, has submitted on 19/01/2011 a cross-site-scripting XSS vulnerability affecting www.givi.com.my, which at the time of submission ranked 2511327 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

Toolza 1.0

=== Toolza1.0 === Nix/Windows/Mac - UTF-8 perlscript download last version at the end of this post /последнюю версию скачать можно снизу этого поста Данная утилита предназначена для тестирования своего веб-ресурса на уязвимости. Любое другое использование скрипта преследуется по закону Last updat...

Unfixed XSS vulnerability at mp3lover.in

Security researcher Snypter Dhruv, has submitted on 01/12/2011 a cross-site-scripting XSS vulnerability affecting mp3lover.in, which at the time of submission ranked 5031284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

HotWeb Rentals "PageId" SQL Injection Vulnerability

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

Unfixed XSS vulnerability at ads.mmania.com

Security researcher warvector, has submitted on 24/12/2010 a cross-site-scripting XSS vulnerability affecting ads.mmania.com, which at the time of submission ranked 17963896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

CVE-2010-4579

Opera before 11.00 is affected by CVE-2010-4579 where dialogs (security information and download prompts) are not properly constrained to stay on top of rendered content, enabling a remote attacker to spoof dialogs and lure users to interact with crafted pages. The issue is documented across mult...

Unfixed Redirect vulnerability at vakbarat.index.hu

Security researcher TinKode, has submitted on 16/12/2010 a Redirect vulnerability affecting vakbarat.index.hu, which at the time of submission ranked 1421 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If y...

Unfixed XSS vulnerability at www.qbike.com

Security researcher C0nw0nk, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www.qbike.com, which at the time of submission ranked 712068 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

PHP Top Sites Cross Site Scripting / SQL Injection

PHP Top Sites Multiple SQL/XSS Vulnerability Author : kAsvææ | c0de Hunters Name : PHP Top Sites Bug Type : SQL/XSS Version :All Google Dork:"Powered By PHP TopSites" Home Page : http://itop10.net/ You can download it : http://webscripts.softpedia.com/script/Top-Sites/PHP-TopSites-41994.html SQL ...

Unfixed XSS vulnerability at www.alexmarshall.org

Security researcher 03storic, has submitted on 12/09/2010 a cross-site-scripting XSS vulnerability affecting www.alexmarshall.org, which at the time of submission ranked 8531912 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...