2580 matches found
CVE-2006-2396
Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...
aklink-sa-2006-001-jsboard-xss.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ ||| Security Advisory AKLINK-SA-2006-001 ||| ||| CAN-2006-2109 CVE candidate ||| ============================================ JSBoard - Cross Site Scripting Attack ===================================== Date...
Cmscout <= V1.10 multiple XSS attack vectors
Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...
[KAPDA::#38] - MyBB 1.1.0~functions_post.php~XSS Attack
ORIGINAL ADVISORY: http://myimei.com/security/2006-03-12/mybb-110functionspostphpxss-attack.html http://kapda.ir/advisory-305.html ---------- ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.0 Class: Remote Status: Unpatched Exploit: Private Solution:...
HYSA-2006-006-g-book.txt
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...
warcraftIII-18c.txt
Website : http://toya.net.pl/julas/w3g/ Version : 1.8c Description : Warcraft III Replay Parser for PHP? What is that? Maybe you know or maybe not that Warcraft III replay files .w3g have much information inside. Almost everything can be pulled out of them: players accounts, races, colours, heroe...
[Full-disclosure] HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...
Mini-NUKE v1.8
= Mini-NUKE v1.8 = Autore: SpiderZ = sito: www.spiderz.tk = Attacco: XSS = file: Search.asp Url: http://www.sito.com/search.phpscript/script Script: nrw&la="scriptalert"Xss by SpiderZ"/script Risultato:...
Limbo CMS Multiple Vulnerabilities
The remote web server contains a PHP application that is affected by numerous vulnerabilities. Description : The remote host is running Limbo CMS, a content-management system written in PHP. The remote version of this software is vulnerable to several flaws including : - If registerglobals is off...
Limbo CMS Multiple Vulnerabilities
The remote version of Limbo CMS is vulnerable to several flaws. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[[KAPDA::#35] MyBB 1.0.3~member.php~XSS Attack in contact details
ORIGINAL ADVISORY: http://myimei.com/security/2006-03-11/mybb-103-memberphp-xss-attack-in-contact-details.html http://kapda.ir/advisory-297.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.0.4 Class: Remote Status: Unpatched Exploit: Available...
Jupiter CMS <= 1.1.5 multiple XSS attack vectors.
Jupiter CMS = 1.1.5 multiple XSS attack vectors. Discovered by: Nomenumbra/0x4F4C Date: 3/11/2006 impact:high privilege escalation,site defacement Jupiter CMS http://www.highstrike.net/ is a dynamic CMS system like mambo or limbo, allowing users to subscribe and posts events. Because no filtering...
JupiterCMS.txt
Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to a page of his choice, effectively defacing the page:...
Jupiter CMS <= 1.1.5 Multiple XSS Attack Vectors
Exploit for unknown platform in category web applications ================================================ Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to ...
Jupiter CMS <= 1.1.5 Multiple XSS Attack Vectors
No description provided by source. Jupiter CMS = 1.1.5 multiple XSS attack vectors. Discovered by: Nomenumbra/0x4F4C Date: 3/11/2006 impact:high privilege escalation,site defacement Jupiter CMS http://www.highstrike.net/ is a dynamic CMS system like mambo or limbo, allowing users to subscribe and...
Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
Jupiter CMS , to redirect the user to a page of your choice, to avoid suspicion and disclosure of your cookiestealer's location. This injections would allow an attacker to redirect users to a page of his choice, effectively defacing the page:...
[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack
Hello Everybody ——–Summary——– Software: CuteNews Sowtware’s Web Site: http://cutephp.com Versions: 1.4.1 Class: Remote Status: Unpatched Exploit: Available Solution: NotAvailable Discovered by: imei addmimistrator Risk Level: Mediume&High ——-Description——- There is a security bug in CuteNews...
[myimei]WordPress2.0.0~autorswebsite~XSS attack
original advisory http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.htmlmore-14 ——————-Summary—————- Software: WordPress Sowtware’s Web Site: http://www.wordpress.org Versions: 2.0.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by:...
sNews - Comment Body Cross-Site Scripting
sNews - Comment Body Cross-Site Scripting source: https://www.securityfocus.com/bid/16647/info sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
[myimei]MyBB 1.0.2 XSS attack in search.php
original advisory: http://myimei.com/security/2006-01-14-mybb-102searchphpxss-attackandmore/index.html --------------- —————-Summary—————- Software: MyBB Sowtware’s Web Site: http://mybboard.com Versions: 1.0.2 Class: Remote Status: patched in 1.0.3 Exploit: Available Solution: Available Discover...