4006 matches found
Unfixed XSS vulnerability at library.umd.umich.edu
Security researcher p0pc0rn, has submitted on 08/12/2010 a cross-site-scripting XSS vulnerability affecting library.umd.umich.edu, which at the time of submission ranked 3022 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...
mod_autoindex XSS
Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...
Mandriva Update for php MDVSA-2010:139 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:139 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Unfixed XSS vulnerability at lookr.tv
Security researcher cbr, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting lookr.tv, which at the time of submission ranked 640118 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed...
ShopCartDx <= v4.30 (products.php) Blind SQL Injection Exploit
Exploit for php platform in category web applications ============================================================== ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @;...
Unfixed XSS vulnerability at www.mai-dga.ro
Security researcher blackboy1337, has submitted on 23/06/2010 a cross-site-scripting XSS vulnerability affecting www.mai-dga.ro, which at the time of submission ranked 2891954 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...
Classmate Script Shell Upload
Thanks To ALLahe 0uJda M0roco Lov3r InformatioN Title : ClassMate Script Remote file Upload Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or http://www.dz4all.com or www.Zoneturka.com Vendor : http://www.availscript.com/classmatescript.php Price : $35 Only! Email :...
Virtual Real Estate Manager 3.5 - SQL Injection
Virtual Real Estate Manager 3.5 - SQL Injection ====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor...
Joomla Component com_jnewsletter SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================ Joomla Component comjnewsletter SQL Injection Vulnerability ============================================================...
CVE-2010-1963
Cross-site scripting XSS vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Joomla BF Quiz SQL Injection Exploit
!/usr/bin/python Joomla Component BF Quiz SQL Injection Exploit by Valentin Hoebel [email protected] Version 1.0 29th May 2010 ASCII FOR BREAKFAST About the vulnerability: ---------------------------------------------------------------------------- Read more here:...
CVE-2010-1606
CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...
Cisco Router and Security Device Manager vulnerable to cross-site scripting
Overview Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability. Cisco Router and Security Device Manager SDM is a web-based device management tool for Cisco routers. Cisco Router and Security Device Manager SDM contains a cross-site scripting vulnerability...
PHP Jokesite V 2.0 exec Command Exploit
Exploit for php platform in category web applications ======================================= PHP Jokesite V 2.0 exec Command Exploit ======================================= ======================================================================================== | Title : PHP Jokesite V 2.0 exec...
CVE-2010-0979
The CVE-2010-0979 issue affects Obsession-Design Image-Gallery (ODIG) 1.1, specifically in display.php where the folder parameter enables cross-site scripting (XSS). The vulnerability allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the handling of ...
Joomla Janews Local File Inclusion
Joomla Component comjanews Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comjanews .:. Bug Type : Local File Inclusion LFI .:...
Duhok Forum 1.0 script - Cross-Site Scripting
Duhok Forum 1.0 script - Cross-Site Scripting ======================================================================================== | Title : Duhok Forum 1.0 script Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com $ | Dork : duhokFr...
Coupons By Pass Admin Vulnerability
Exploit for unknown platform in category web applications =================================== Coupons By Pass Admin Vulnerability =================================== ======================================================================================== | Title : Coupons By Pass Admin...
Multiple File Attachments Mail Form Pro 2.0 - Arbitrary File Upload
Exploit Title: Multiple File Attachments Mail Form Pro v2 - WebShell upload Date: 16/02/2010 Author: EgoPL Mail: [email protected] Software Link: http://activeden.net/item/multiple-file-attachments-mail-form-prov2/31262 17$ but It's now on a lot of file hosts companys like rapishare etc Version: P...