Unfixed XSS vulnerability at www.mai-dga.ro

Security researcher blackboy1337, has submitted on 23/06/2010 a cross-site-scripting XSS vulnerability affecting www.mai-dga.ro, which at the time of submission ranked 2891954 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...

Classmate Script Shell Upload

Thanks To ALLahe 0uJda M0roco Lov3r InformatioN Title : ClassMate Script Remote file Upload Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or http://www.dz4all.com or www.Zoneturka.com Vendor : http://www.availscript.com/classmatescript.php Price : $35 Only! Email :...

Joomla Component com_jnewsletter SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comjnewsletter SQL Injection Vulnerability ============================================================...

Virtual Real Estate Manager 3.5 - SQL Injection

Virtual Real Estate Manager 3.5 - SQL Injection ====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor...

CVE-2010-1963

Cross-site scripting XSS vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Joomla BF Quiz SQL Injection Exploit

!/usr/bin/python Joomla Component BF Quiz SQL Injection Exploit by Valentin Hoebel [email protected] Version 1.0 29th May 2010 ASCII FOR BREAKFAST About the vulnerability: ---------------------------------------------------------------------------- Read more here:...

CVE-2010-1606

CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...

Cisco Router and Security Device Manager vulnerable to cross-site scripting

Overview Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability...

PHP Jokesite V 2.0 exec Command Exploit

Exploit for php platform in category web applications ======================================= PHP Jokesite V 2.0 exec Command Exploit ======================================= ======================================================================================== | Title : PHP Jokesite V 2.0 exec...

CVE-2010-0979

The CVE-2010-0979 issue affects Obsession-Design Image-Gallery (ODIG) 1.1, specifically in display.php where the folder parameter enables cross-site scripting (XSS). The vulnerability allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the handling of ...

Duhok Forum 1.0 script - Cross-Site Scripting

Duhok Forum 1.0 script - Cross-Site Scripting ======================================================================================== | Title : Duhok Forum 1.0 script Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com $ | Dork : duhokFr...

Joomla Janews Local File Inclusion

Joomla Component comjanews Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comjanews .:. Bug Type : Local File Inclusion LFI .:...

Coupons By Pass Admin Vulnerability

Exploit for unknown platform in category web applications =================================== Coupons By Pass Admin Vulnerability =================================== ======================================================================================== | Title : Coupons By Pass Admin...

Multiple File Attachments Mail Form Pro 2.0 - Arbitrary File Upload

Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload Date: 16/02/2010 Author: EgoPL Mail: [email protected] Software Link: http://activeden.net/item/multiple-file-attachments-mail-form-prov2/31262 17$ but It's now on a lot of file hosts companys like rapishare etc Version: P...

Mambo ACNews SQL Injection

Title: Mambo Component comacnews id | SQL Injection Date: 15/02/2010 Author: Ro0T-MaFia Software Link: .... Version: ... Tested on:...

RealAdmin - 'detail.php' Blind SQL Injection

RealAdmin detail.php Blind Sql Injection Vulnerability ======================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script: http://www.redcow.ca/products/realadmin...

cuteeditor using the method of two-vulnerability and early warning-the black bar safety net

Author: m@w01f 1. Direct Download load. ashx configuration file http://www.7747.net/CuteSoftClie ... ../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name="ynncConnectionString" connectionString="Server=....

CVE-2009-4468

DeluxeBB 1.3 is affected by a Cross-site Scripting (XSS) vulnerability in misc.php via the page parameter. This is a client-side script injection risk in the web interface. The CVE entry CVE-2009-4468 states the vulnerability allows remote attackers to inject arbitrary web script or HTML. Connect...

caricatier 2.5 - Cross-Site Scripting

======================================================================================== | Title : caricatier 2.5 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Unfixed XSS vulnerability at www.legambiente.eu

Security researcher Ribel, has submitted on 15/12/2009 a cross-site-scripting XSS vulnerability affecting www.legambiente.eu, which at the time of submission ranked 197167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...