Unfixed XSS vulnerability at www.scsmods.com

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.scsmods.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixe...

phpnukegen-sql.txt

PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...

Unfixed XSS vulnerability at www.cliffsnotes.com

Security researcher SolarFlare, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.cliffsnotes.com, which at the time of submission ranked 20092 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at bitefight.it

Security researcher Ic3Drag0n, has submitted on 19/02/2008 a cross-site-scripting XSS vulnerability affecting bitefight.it, which at the time of submission ranked 14713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

CVE-2008-0417

CVE-2008-0417 is a CRLF injection vulnerability affecting Mozilla Firefox prior to 2.0.0.12 (and related Mozilla-based products such as SeaMonkey/XULRunner). The issue allows a remote website to corrupt the password store by submitting newline characters during password saving. Connected advisori...

Unfixed XSS vulnerability at www.student.se

Security researcher Uber0n, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.student.se, which at the time of submission ranked 81299 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

vbmarketing-lfi.txt

: Discovery by: Sw33t h4cK3r : POWERED BY: VB Marketing ----------- Exploit : http://Example.com/cgi-bin/tseekdir.cgi?location=/etc/passwd%00...

Unfixed XSS vulnerability at www.pinakothek.de

Security researcher Uber0n, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.pinakothek.de, which at the time of submission ranked 425570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.authorize.net

Security researcher C1c4Tr1Z, has submitted on 01/05/2008 a cross-site-scripting XSS vulnerability affecting www.authorize.net, which at the time of submission ranked 6760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

CVE-2007-6659

Multiple cross-site scripting XSS vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 contentshort or 2 contentfull parameter in an addnews action to the default URI; 3 the content parameter in a pm write action to 2z/admin.php; 4 the...

XCMS本地文件包含和任意文件上传漏洞

XCMS是一款基于PHP的WEB应用程序。 XCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容，及上传任意文件并执行。 问题是由于多个脚本对用户提交的WEB参数处理缺少充分过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XCMS 1.82 目前没有解决方案提供： http://www.xcms.it/index.php http://www.example.com/xcms/index.php?pg=admins=../../../../../etc/passwd\0...

Unfixed XSS vulnerability at kkanari.org

Security researcher tweetycoaster, has submitted on 28/12/2007 a cross-site-scripting XSS vulnerability affecting kkanari.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

Unfixed XSS vulnerability at www.storktec.com

Security researcher TreX, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.storktec.com, which at the time of submission ranked 2447689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currentl...

Unfixed XSS vulnerability at www.fk.unair.ac.id

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.fk.unair.ac.id, which at the time of submission ranked 117249 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at yangyuying.ifensi.com

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting yangyuying.ifensi.com, which at the time of submission ranked 569 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.nsw2007.co.uk

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.nsw2007.co.uk, which at the time of submission ranked 9475884 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at 33.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 33.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Unfixed XSS vulnerability at 49.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 49.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...