Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting

Overview Fulltext search CGI from futomi's CGI Cafe contains a cross-site scripting vulnerability. Fulltext search CGI, website search software from futomi's CGI Cafe, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution...

JP1/Cm2/Network Node Manager vulnerable to cross-site scripting

Overview Hitachi JP1/Cm2/Network Node Manager NNM is vulnerable to cross-site scripting. Hitachi JP1/Cm2/Network Node Manager NNM is software that helps a network administrator manage network configurations, faults, and other elements. Hitachi NNM is vulnerable to cross-site scripting. Impact An...

Unfixed XSS vulnerability at skylinesoaring.org

Security researcher k1ll3rnull, has submitted on 18/05/2008 a cross-site-scripting XSS vulnerability affecting skylinesoaring.org, which at the time of submission ranked 5389167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It is...

Unfixed XSS vulnerability at greatriversnetwork.org

Security researcher skathgh420, has submitted on 05/10/2008 a cross-site-scripting XSS vulnerability affecting greatriversnetwork.org, which at the time of submission ranked 4009286 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It...

txtCMS 0.3 (index.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit 0day.today 2018-03-09...

onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

Unfixed XSS vulnerability at www.gmccollection.com

Security researcher jean-claude, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.gmccollection.com, which at the time of submission ranked 2076797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2008. It...

Unfixed XSS vulnerability at search2.computer.org

Security researcher xylitol, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting search2.computer.org, which at the time of submission ranked 11240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

bug report

Author: Hadi Kiamarsi Exploit By : Hadi Kiamarsi Email : [email protected] CMS: chicomas.2.0.4 Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip web site : http://ircrash.com File Inclusion Local & Remote Bugs : Local File Inclusion:...

Unfixed XSS vulnerability at www.wingate.org.il

Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting www.wingate.org.il, which at the time of submission ranked 741159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It...

Unfixed XSS vulnerability at www.findevent.org

Security researcher Uber0n, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.findevent.org, which at the time of submission ranked 12052840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Fixed XSS vulnerability at www.wcm.at

Security researcher Viper.aT, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.wcm.at, which at the time of submission ranked 54497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

Unfixed XSS vulnerability at www.sustainweb.org

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.sustainweb.org, which at the time of submission ranked 889720 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is...

Unfixed XSS vulnerability at www.futurevision.com.ua

Security researcher Stacker, has submitted on 04/10/2008 a cross-site-scripting XSS vulnerability affecting www.futurevision.com.ua, which at the time of submission ranked 550026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is...

Prozilla Reviews Script 1.0 - Arbitrary Delete User

Prozilla Reviews Script 1.0 - Arbitrary Delete User --==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==--...

Unfixed XSS vulnerability at www.anfe.fr

Security researcher xylitol, has submitted on 04/06/2008 a cross-site-scripting XSS vulnerability affecting www.anfe.fr, which at the time of submission ranked 3268458 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Multiple XSS in DigiDomain

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

Alkacon OpenCms users_list.jsp searchfilter XSS

Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...

Unfixed XSS vulnerability at revivetube.com

Security researcher Zeitjak, has submitted on 03/10/2008 a cross-site-scripting XSS vulnerability affecting revivetube.com, which at the time of submission ranked 828953 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currentl...

Unfixed XSS vulnerability at www.myleague.com

Security researcher Phanter-RooT, has submitted on 03/04/2008 a cross-site-scripting XSS vulnerability affecting www.myleague.com, which at the time of submission ranked 22989 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...