CVE-2009-2165

SerendipityNZ aka SimpleBoxes Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id...

Unfixed XSS vulnerability at ready.mobi

Security researcher PaPPy, has submitted on 18/06/2009 a cross-site-scripting XSS vulnerability affecting ready.mobi, which at the time of submission ranked 56726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/10/2010. It is currently...

Virtue Classifieds (category) SQL Injection Vulnerability

No description provided by source. CMS : Virtue Classifieds WEB : http://www.virtuenetz.com/classified/ Archivo : search.php Variable Tipo : GET Valor : category Tipo : SQL Injection Url : http:/www.site.com/search.php?category=SQLI PoC:...

Escon SupportPortal Pro 3.0 SQL Injection

Autor : OzX Sitio : Foro.Undersecurity.net Cms : Escon SupportPortal Pro Version : 3.0 Sitio: http://www.e-supportportal.com Tipo Vulnz : Blind Sql Injection Archivo : forum.php Parametro Vulnerable 1 : cat Parametro Vulnerable 2 : tid Source Vulnz forum.php: 60 - if$REQUEST"a"=="rss" 61 -...

Unfixed XSS vulnerability at www.deathswitch.com

Security researcher Uber0n, has submitted on 18/05/2009 a cross-site-scripting XSS vulnerability affecting www.deathswitch.com, which at the time of submission ranked 884058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at www.tasty-recipes.org

Security researcher x0x, has submitted on 30/04/2009 a cross-site-scripting XSS vulnerability affecting www.tasty-recipes.org, which at the time of submission ranked 1597204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

php: XSS via PHP error messages

Cross-site scripting XSS vulnerability in PHP, possibly 5.2.7 and earlier, when displayerrors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208...

glFusion 1.1.2 - COM_applyFilter()order SQL Injection

glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...

Unfixed XSS vulnerability at www.decaturalabamausa.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.decaturalabamausa.com, which at the time of submission ranked 3782718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Unfixed XSS vulnerability at inthevip.com

Security researcher nicholson, has submitted on 03/07/2009 a cross-site-scripting XSS vulnerability affecting inthevip.com, which at the time of submission ranked 27644 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently...

Unfixed XSS vulnerability at www.adventureengine.com

Security researcher LeBaNeSe-XsSeR, has submitted on 03/01/2009 a cross-site-scripting XSS vulnerability affecting www.adventureengine.com, which at the time of submission ranked 1034738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/200...

Unfixed XSS vulnerability at www.thegoodbrothers.com

Security researcher s E t H - X-C3LL, has submitted on 27/02/2009 a cross-site-scripting XSS vulnerability affecting www.thegoodbrothers.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. I...

Unfixed XSS vulnerability at headbang.sk

Security researcher TreX, has submitted on 02/10/2009 a cross-site-scripting XSS vulnerability affecting headbang.sk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently unfixed. ...

CVE-2009-0488

Phorum (PHP-based forum software) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 5.2.10. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (MEDIUM) with network attack ...

CVE-2009-0204

Cross-site scripting XSS vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.abdulkadirkocabas.com

Security researcher CaRRiSMaTuRK, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting www.abdulkadirkocabas.com, which at the time of submission ranked 21249690 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at developer.klocwork.com

Security researcher Fabian Fingerle, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting developer.klocwork.com, which at the time of submission ranked 719351 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009...

PHP Photo Album 0.8b - preview Local File Inclusion

PHP Photo Album 0.8b - preview Local File Inclusion START 0x01 Informations: Script : Php Photo Album 0.8 BETA Download : http://sourceforge.net/project/downloading.php?groupid=151573&usemirror=kent&filename=PHPPA.9BETA.zip&37834145 Vulnerability : Local File Inclusion Author : Osirys Contact :...

CVE-2008-5891

Injader before 2.1.2 contains a Cross‑site Scripting (XSS) vulnerability in the profile editing functionality. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented impact includes partial integrity compromise without affecting confidentiality...