Unfixed XSS vulnerability at www.anfe.fr

Security researcher xylitol, has submitted on 04/06/2008 a cross-site-scripting XSS vulnerability affecting www.anfe.fr, which at the time of submission ranked 3268458 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Prozilla Reviews Script 1.0 - Arbitrary Delete User

Prozilla Reviews Script 1.0 - Arbitrary Delete User --==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==--...

Multiple XSS in DigiDomain

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

Alkacon OpenCms users_list.jsp searchfilter XSS

Alkacon OpenCms userslist.jsp searchfilter XSS Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a cross-site scripting vulnerability in the user management function. Input to parameter searchfilter in page opencms/system/workplace/admin/accounts/userslist.jsp is not sufficiently...

Unfixed XSS vulnerability at revivetube.com

Security researcher Zeitjak, has submitted on 03/10/2008 a cross-site-scripting XSS vulnerability affecting revivetube.com, which at the time of submission ranked 828953 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currentl...

Unfixed XSS vulnerability at www.myleague.com

Security researcher Phanter-RooT, has submitted on 03/04/2008 a cross-site-scripting XSS vulnerability affecting www.myleague.com, which at the time of submission ranked 22989 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at www.scsmods.com

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.scsmods.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently unfixe...

phpnukegen-sql.txt

PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...

Unfixed XSS vulnerability at www.cliffsnotes.com

Security researcher SolarFlare, has submitted on 21/02/2008 a cross-site-scripting XSS vulnerability affecting www.cliffsnotes.com, which at the time of submission ranked 20092 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at bitefight.it

Security researcher Ic3Drag0n, has submitted on 19/02/2008 a cross-site-scripting XSS vulnerability affecting bitefight.it, which at the time of submission ranked 14713 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...

CVE-2008-0417

CVE-2008-0417 is a CRLF injection vulnerability affecting Mozilla Firefox prior to 2.0.0.12 (and related Mozilla-based products such as SeaMonkey/XULRunner). The issue allows a remote website to corrupt the password store by submitting newline characters during password saving. Connected advisori...

Unfixed XSS vulnerability at www.student.se

Security researcher Uber0n, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.student.se, which at the time of submission ranked 81299 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

vbmarketing-lfi.txt

: Discovery by: Sw33t h4cK3r : POWERED BY: VB Marketing ----------- Exploit : http://Example.com/cgi-bin/tseekdir.cgi?location=/etc/passwd%00...

Unfixed XSS vulnerability at www.pinakothek.de

Security researcher Uber0n, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.pinakothek.de, which at the time of submission ranked 425570 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.authorize.net

Security researcher C1c4Tr1Z, has submitted on 01/05/2008 a cross-site-scripting XSS vulnerability affecting www.authorize.net, which at the time of submission ranked 6760 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

CVE-2007-6659

Multiple cross-site scripting XSS vulnerabilities in 2z project 0.9.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 contentshort or 2 contentfull parameter in an addnews action to the default URI; 3 the content parameter in a pm write action to 2z/admin.php; 4 the...

XCMS本地文件包含和任意文件上传漏洞

XCMS是一款基于PHP的WEB应用程序。 XCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容，及上传任意文件并执行。 问题是由于多个脚本对用户提交的WEB参数处理缺少充分过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XCMS 1.82 目前没有解决方案提供： http://www.xcms.it/index.php http://www.example.com/xcms/index.php?pg=admins=../../../../../etc/passwd\0...

Unfixed XSS vulnerability at kkanari.org

Security researcher tweetycoaster, has submitted on 28/12/2007 a cross-site-scripting XSS vulnerability affecting kkanari.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...