dxbbs注入漏洞

在UserFriend.aspx过滤了=Add&Name=admin加上'' 典型的过滤不严,导致注入漏洞. dxbbs 7.3 http://www.dxbbs.cn/ http://www.winshell.cn/read.php?508 SQL版测试方法: serFriend.aspx过滤了=Add&Name=大蝉;Update Dxbbsuser set userpass=''7a57a5a743894a0e'' where username=''admin'';--...

Unfixed XSS vulnerability at www.norred.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.norred.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...

Unfixed XSS vulnerability at www.h1base.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.h1base.com, which at the time of submission ranked 141766 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It...

Unfixed XSS vulnerability at www.scienceandsociety.co.uk

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting www.scienceandsociety.co.uk, which at the time of submission ranked 341761 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It ...

Unfixed XSS vulnerability at www.nawzadgroup.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.nawzadgroup.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currentl...

Unfixed XSS vulnerability at sin-limite.net

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting sin-limite.net, which at the time of submission ranked 6693504 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is current...

clipshare-rfi.txt

By Hasadya Raed Contact : RaeD At BsdMail Dot Com / GunManPump At Hotmail Dot Com ---------------------------------------------------------------------------------------------------- Script : ClipShare.v1.5.3 Dork : "Copyright © 2006 Powered By Clip-Share.Com. All rights reserved"...

efiction-rfi.txt

To ConTacT mE @ www.Asb-May.net/bb ScRiPt:-http://www.efiction.org/downloads/eFiction31.zip GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th logout.php:- includeonce$pathtosmf."Sources/Subs-Auth.php"; getsessionvars.php:- requireonce$pathtosmf."SSI.php";...

Unfixed XSS vulnerability at www.cgv.fr

Security researcher SCRiPToRiuM, has submitted on 16/02/2007 a cross-site-scripting XSS vulnerability affecting www.cgv.fr, which at the time of submission ranked 3434338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is current...

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ==================================================================== nabopoll 1.2 survey.inc.php path Remote File Include Vulnerability ==================================================================== By email protectedKing Thakns :...

FishCart [injection sql]

vendor site: http://fishcart.org/ product :fish cart bug:injection sql risk : medium injection sql : /display.php?cartid=200701210157208&zid=1&lid=1&olimit=5&cat=&key1=&nlst=y&olst='sql change the cartid value with yours laurent gaffie http://s-a-p.ca/ contact: [email protected]...

The use of manual detection of the password, ９ ０-invasion ５ website-vulnerability warning-the black bar safety net

The use of manual detection of the password, ９ ０-invasion ５ website In order to further improve our panel of the electronic design, the other night in the SCM experiments smothering overtime, has been debugging into the wee hours of the three roll call minutes before they succeed．．． Happy ...^^...

In my territory it would have to listen to me--listen to the antivirus software to tell you the site path-vulnerability warning-the black bar safety net

I'm a rookie, this is nothing advanced technology, which is more than a careful, master can be skipped. This time aiming for just one big Station, 've occasionally heard the name, today to see the TV, but can also be seen on TV in his ads, it seems that the more do the better, hand it in on the...

miniwebshop-xss.txt

Hello Vulnerable : MINI WEB SHOP Version: 2.1.c web : http://ObieWebsite.SourceForge.net I Found some bugs XSS & Full Path Disclosure in MINI WEB SHOP XSS : http://example.com/miniwebshop/modules/viewcategory.php?catname='alertdocument.cookie Full Path Disclosure :...

Wallpaper Complete Website 1.0.09 - SQL Injection

Coding 4 Fun Wallpaper Complete Website 1.0.09 http://www.easysitenetwork.com/modules.php?name=Content&pa=showpage&pid=7 ; Class = SQL Injection ; Download = http://www.easysitenetwork.com/modules.php?name=Downloads&dop=getit&lid=8 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...

ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ContentNow CMS 1.39 'pageid' Sql Injection + Path Disclosure Severity : Medium Risk Vendor : http://www.contentnow.mf4k.de/ Author : Revenge -------------------------------------------------- Description ContentNow is a PHP Content Management System w...

PHPWind 5.0.1 - 'AdminUser' Blind SQL Injection

126 $result.=" ."; else $resul...

SQL in WebWizForum by almaster hacker

WebWizForum aLMaSTeR HaCKeR .. SQL FOunder - | [email protected]|- Gr33tz :- To Evil Hacker - Kuwaiti Hacker - Devil-00 &..... all members in Lezr.com , securityGurusdotcom......... SQL In search.asp: http://www.site.com/forum/search.asp?KW=|SQL| Error: Microsoft OLE DB Provider for SQL Server...

PowerMovieList 0.13/0.14 - Edit User HTML Injection

source: https://www.securityfocus.com/bid/20564/info PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the...

JAF CMS Remote file include (website)

=========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Version : 4.0...