php: XSS via PHP error messages

Cross-site scripting XSS vulnerability in PHP, possibly 5.2.7 and earlier, when displayerrors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208...

glFusion 1.1.2 - COM_applyFilter()order SQL Injection

glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...

Unfixed XSS vulnerability at www.decaturalabamausa.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.decaturalabamausa.com, which at the time of submission ranked 3782718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Unfixed XSS vulnerability at inthevip.com

Security researcher nicholson, has submitted on 03/07/2009 a cross-site-scripting XSS vulnerability affecting inthevip.com, which at the time of submission ranked 27644 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently...

Unfixed XSS vulnerability at www.adventureengine.com

Security researcher LeBaNeSe-XsSeR, has submitted on 03/01/2009 a cross-site-scripting XSS vulnerability affecting www.adventureengine.com, which at the time of submission ranked 1034738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/200...

Unfixed XSS vulnerability at www.thegoodbrothers.com

Security researcher s E t H - X-C3LL, has submitted on 27/02/2009 a cross-site-scripting XSS vulnerability affecting www.thegoodbrothers.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. I...

Unfixed XSS vulnerability at headbang.sk

Security researcher TreX, has submitted on 02/10/2009 a cross-site-scripting XSS vulnerability affecting headbang.sk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently unfixed. ...

CVE-2009-0488

Phorum (PHP-based forum software) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 5.2.10. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (MEDIUM) with network attack ...

CVE-2009-0204

Cross-site scripting XSS vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at developer.klocwork.com

Security researcher Fabian Fingerle, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting developer.klocwork.com, which at the time of submission ranked 719351 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009...

Unfixed XSS vulnerability at www.abdulkadirkocabas.com

Security researcher CaRRiSMaTuRK, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting www.abdulkadirkocabas.com, which at the time of submission ranked 21249690 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

PHP Photo Album 0.8b - preview Local File Inclusion

PHP Photo Album 0.8b - preview Local File Inclusion START 0x01 Informations: Script : Php Photo Album 0.8 BETA Download : http://sourceforge.net/project/downloading.php?groupid=151573&usemirror=kent&filename=PHPPA.9BETA.zip&37834145 Vulnerability : Local File Inclusion Author : Osirys Contact :...

CVE-2008-5891

Injader before 2.1.2 contains a Cross‑site Scripting (XSS) vulnerability in the profile editing functionality. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented impact includes partial integrity compromise without affecting confidentiality...

PHP vulnerable to cross-site scripting

Overview PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. report...

Unfixed XSS vulnerability at www.thepulsarband.com

Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting www.thepulsarband.com, which at the time of submission ranked 20347078 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It ...

tomcat: Cross-Site-Scripting enabled by sendError call

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

Unfixed XSS vulnerability at www.carfreeday.ca

Security researcher xylitol, has submitted on 12/08/2008 a cross-site-scripting XSS vulnerability affecting www.carfreeday.ca, which at the time of submission ranked 11145476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

CVE-2008-5067

CVE-2008-5067 describes a cross-site scripting (XSS) vulnerability in Kmita Catalogue 2.x, exploitable via search.php parameter q. The connected records confirm the affected software (Kmita Catalogue 2.x) and the vulnerable entry point (search.php), with the underlying issue being improper handli...

Unfixed XSS vulnerability at www.ifoods.tv

Security researcher xylitol, has submitted on 11/11/2008 a cross-site-scripting XSS vulnerability affecting www.ifoods.tv, which at the time of submission ranked 70726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/11/2008. It is currently...