278 matches found
Phorum < 5.1.19 register.php XSS
Binary data 3898.prm...
AnnonceScriptHP 2.0 - 'membre.dwt.php?email' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...
ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit
----------------------------------------------------------------------------- - ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit - -= http://colander.altervista.org/advisory/ASPDisc.txt =- ----------------------------------------------------------------------------- -= ASP...
Toasts Forums 1.6.44 in Xss
ENGLISH Title : Toast Forums 1.6.44 in Xss Author : ajann Exploit; XSS Example Forum Post Message,Reply.. IMG onmouseover=Javascript:alertdocument.domain src="x.gif" Alert: xxx.com / ajann,Turkey TURKISH Baslk : Toast Forums 1.6.44 in Xss Ac Bulan : ajann Ack bulunan dosyalar; Foruma post...
livehelper.txt
================== Credit: Mr-X Site: www.alshmokh.com Email: [email protected] ================== Example:- /chat.php?action=showmain&PHPSESSID=XSS...
phpBB "charts.php" XSS and SQL-Injection
// phpBB "charts.php" hack XSS and SQL-Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/charts.php?action=vote&rate=1&id=XSS http://www.example.com/charts.php?action=vote&rate=1&id=SQL - Googledork:...
[Full-disclosure] phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2
Source: http://securityreason.com/achievementsecurityalert/34 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpinfo Cross Site Scripting PHP 5.1.2 and 4.4.2 Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 26.2.2006 - -Public: 8.4.2006 from SecurityReason.Com CVE-2006-0996 - ---...
txtForum 1.0.31.0.4 - Multiple Cross-Site Scripting Vulnerabilities
txtForum 1.0.31.0.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17054/info txtForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker m...
icqmailXSS.txt
--Security Report-- Advisory: ICQmail.com & Mail2World.com msinbox.asp Currentfolder XSS vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 25/02/06 01:43 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: M2W...
e107 <= 0.617 XSS Remote Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ================================================== e107 = 0.617 XSS Remote Cookie Disclosure Exploit ================================================== / Post the below code into a new message. Credits to Nick Griffin. /str0ke /...
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ==================================================== phpBB = 2.0.16 XSS Remote Cookie Disclosure Exploit ==================================================== / Post the below code into a new message. Example Output: ... - -...
phpOpenChat.txt
PersianHacker.NET 200503-09PHPOpenChat v3.X XSS Multiple Vulnerability Date: 2005 March Bug Number: 09 PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site. More info @: http://phpopenchat.org/ Discussion: -------------------- Th...
PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities
PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input befo...
PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...
phpfusionXSS.txt
I found an exploit in the current version of php-fusion which allows you to input XSS in the IMG tag. I reported it already to php-fusion and they created a fix for this. Here it goes: By converting the text ie. javascript:alert'test' to their ascii values, the strings between the img/img tags...
Invision Power Boards 1.3.1 FINAL XSS Exploit
Description: Lack of checking in the SML codes. Exploit: Put this into any signature or post on an invision forum: COLOR=IMGhttp://aaa.aa/=aaa.jpg/IMGstyle=background:url"javascript:document.location.replace'http://www.hackthissite.org';" /color Fix: I'm not good at regexes :...
[waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2
================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...
[NT] Multiple Vulnerabilities Found in Forum Web Server
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...