Unfixed XSS vulnerability at www.jivesoftware.com

Security researcher 0ssi3, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.jivesoftware.com, which at the time of submission ranked 55311 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.firmaekle.com

Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.firmaekle.com, which at the time of submission ranked 2292456 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at www.ecadviser.com

Security researcher MaXWeL, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.ecadviser.com, which at the time of submission ranked 7670234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...

ggcms-exec.txt

? // //Kacper & str0ke Settings $exploitname = "GGCMS = v1.1.0 RC1 Remote Auto Deface Exploit / Remote Code Execution Exploit"; $scriptname = "GGCMS v1.1.0 RC1"; $scriptsite = "http://ggcms.weblance.pl/"; $dork = '"Powered by GGCMS"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+...

Full Path Disclosure in Open-Realty ( v2.3.4 )

Hello Vulnerable : Open-Realty Verision : 2.3.4 Web : http://www.open-realty.org Exploit : http://www.example.com/script/index.php?action=listingview&listingID='anything' -------------------- Discoverey By LinuxDrox www.LeZr.Com/vb Best Regards ,,,,...

CVE-2007-0120

Acunetix Web Vulnerability Scanner WVS 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of service application crash via multiple HTTP requests containing invalid Content-Length values...

Unfixed XSS vulnerability at www.fantasyplanet.cz

Security researcher RubberDuck, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.fantasyplanet.cz, which at the time of submission ranked 145718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...

CVE-2006-6350

Listpics 5 stores sensitive data under the web root due to insufficient access control, enabling remote attackers to download listpics.mdb via a direct request. Affected product: Listpics 5. Root cause: web-accessible database file (listpics.mdb) exposed without proper permissions. Impact: comple...

CVE-2006-6329

index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile parameter...

CVE-2006-6272

Cross-site scripting XSS vulnerability in spindex.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

PT-2006-6712 · 20/20 · 20/20 Datashed

Name of the Vulnerable Software and Affected Versions: 20/20 DataShed aka Real Estate Listing System affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the itemID parameter to "f-email.asp", or the peopleID an...

动网(DVBBS)tongji.asp文件未过滤注入漏洞

6 if request"orders"=1 then 7 call tongji 8 elseif request"orders"=2 then 9 call topuser ... 60 sub topuser 61 set rs=server.createobject"adodb.recordset" 62 sql="select top "&request"n"&" username,useremail,userclass,oicq,homepage,article,addDate from user order by article desc"...

easypageSQL.txt

vendor : easypage.org BY : s3rv3rhack3r www : hackerz.ir & h4ckerz.com bug : default.aspx?page=Search&app=Search&srch=sql and more...

xpoll110.txt

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...

DEBIAN-CVE-2006-4111

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOADPATH variable, a different vulnerability than CVE-2006-4112...

Microsoft IIS ASP Stack Overflow Exploit (MS06-034)

No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...

QTOFileManager 1.0

-------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/qtofm.php?delete=3Cscript3Ealert22Ellipsis20Security20Test223C/script3E&u=username&pathext=1...

CVE-2006-3156

CVE-2006-3156 describes a cross-site scripting (XSS) vulnerability in the web application, specifically in the file index.cgi of Ultimate eShop 1.0 and earlier. The issue is exploitable via the subid parameter and allows remote attackers to inject arbitrary web script or HTML. The available metad...

DEBIAN-CVE-2006-2106

Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...

Grep with web vulnerability discovery-vulnerability warning-the black bar safety net

Grep with web vulnerability mining Text/SuperHeiAtph4nt0m.org 2006-03-08 a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin...