CVE-2007-5179

CVE-2007-5179 describes multiple XSS vulnerabilities in iletisim.asp of Y&K Iletisim Formu. The impact is injection of arbitrary web script/HTML via the parameters ad, sehir, yas, cins, tel, mail, and mesaj, with the note that provenance is from third-party information. Connected documents confir...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso.com, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1080889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

neuron news 1.0 - index.php?q Local File Inclusion

neuron news 1.0 - index.php?q Local File Inclusion \|/// \ - - // Y! Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Neuron News 1.0 Download : http://downloads.localhost.be/scripts/neuronnews.zip Author : Dj7xpl HomePage : http://r00t.ir /...

phpsyncml 0.1.2 - Remote File Inclusion

======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== phpsyncml = 0.1.2 Remote File Include...

AV Tutorial Script 1.0 - Remote User Pass Change

AV Tutorial Script 1.0 - Remote User Pass Change 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string...

AV Tutorial Script 1.0 - Remote User Pass Change

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

NavBoard 2.6.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ NavBoard 2.6.0 Remote Code Execution Exploit ============================================ "; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print "";...

r2k-disclose.txt

\|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- ! Portal...

monalbum-exec.txt

"; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase = $POST'gcfgBase'; $gcfgUser = $POST'gcfgUser'; $gcfgPass = $POST'gcfgPass'; $gcfgHote = $POST'gcfgHote'; $gpage = $POST'gpage'; $grepertoire = $POST'grepertoire'; $gfond = $POST'gfond'; $gtitre =...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso, has submitted on 05/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1053645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is currently...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

1024CMS-disclose.txt

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...

1024 CMS 0.7 - download.php Remote File Disclosure

1024 CMS 0.7 - download.php Remote File Disclosure '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor :...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...