Unfixed XSS vulnerability at www.citrus-gift-baskets.com

Security researcher JustPoDCasT, has submitted on 20/04/2009 a cross-site-scripting XSS vulnerability affecting www.citrus-gift-baskets.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/06/2009. It...

form2list - 'page.php?id' SQL Injection

! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...

CMS S.Builder 3.7 Remote File Inclusion

CMS S.Builder = 3.7 RFI Vulnerability Information: Vendor: http://www.sbuilder.ru Affected versions: 3.7 and possibly later versions Description: The engine of this cms makes site files index.php, etc with code like: --- PHP Code: if !isset$GLOBALS'binnincludepath' $GLOBALS'binnincludepath' = '';...

RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability

Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 + Website: http://sourceforge.net/projects/ritsblog/ + Bugs: A SQL Injection B XSS Persistent + Exploitation: Remote + Date: 02 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta +...

i-dreams Mailer 1.2 Final (admin.dat) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

biggboss2 SQL Injection

==================================================================== Website: http://biggboss2.in.com/ Category: TV Show Vulnerability: Inband SQL Injection Founder: Jaydeep [email protected] Date: 16th Feb, 2009 ==================================================================== == P O C...

compareindia.in.com SQL Injection

==================================================================== Website: http://compareindia.in.com/ Category: India's biggest hardware comparision website + buyer's guide Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

pHNews Alpha 1 Database Disclosure

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x03 Exploit: Exploit:...

Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Unfixed XSS vulnerability at www.x3lartedelviaggio.bmw.it

Security researcher Mystick, has submitted on 02/05/2009 a cross-site-scripting XSS vulnerability affecting www.x3lartedelviaggio.bmw.it, which at the time of submission ranked 39837 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2009. I...

Max.Blog 1.0.6 - 'show_post.php' SQL Injection

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

Unfixed XSS vulnerability at projeep.co.il

Security researcher ResisTance, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting projeep.co.il, which at the time of submission ranked 13447364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

DS-IPN.NET Digital Sales IPN - Database Disclosure

DS-IPN.NET Digital Sales IPN - Database Disclosure -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || ||...

Active Bids

--------------------------------------------------------- Portal Name: Active Bids Vendor : http://www.activewebsoftwares.com/P84ActiveBids.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

Comersus Shopping Cart <= v6 Remote User Pass Exploit

Exploit for unknown platform in category web applications ===================================================== Comersus Shopping Cart Name Last Name Company...

PHP-Fusion Mod vArcade 1.8 (comment_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHP-Fusion Mod vArcade 1.8 commentid SQL Injection Vulnerability ===================================================================...

Unfixed XSS vulnerability at canadian-medshop.com

Security researcher pimpim, has submitted on 01/07/2009 a cross-site-scripting XSS vulnerability affecting canadian-medshop.com, which at the time of submission ranked 900693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

getaphpsite Top Sites SQL Injection

getaphpsite Top Sites cat Remote Sql inj script: http://www.getaphpsite.com/24.html ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 31.12.2008 Home: www.z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIM...

PHPLD 3.3 - Blind SQL Injection

PHPLD 3.3 - Blind SQL Injection phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or...

Joomla! Component Volunteer 2.0 - SQL Injection

Joomla! Component Volunteer 2.0 - SQL Injection Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Volunteer ! 05.04.2007 ! John Pan !...