Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover...

Unfixed XSS vulnerability at www.littleyellowdifferent.com

Security researcher skathgh420, has submitted on 07/09/2008 a cross-site-scripting XSS vulnerability affecting www.littleyellowdifferent.com, which at the time of submission ranked 1255516 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2008-3054

SQL injection vulnerability in the Branchenbuch aka Yellow Pages o mhbranchenbuch extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Unfixed XSS vulnerability at www.vadodarayellowpages.net

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.vadodarayellowpages.net, which at the time of submission ranked 2345797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008...

Unfixed XSS vulnerability at www.cyprusyellowpages.com

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.cyprusyellowpages.com, which at the time of submission ranked 1248240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/04/2008. I...

Unfixed XSS vulnerability at www.yellowpageskenya.com

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.yellowpageskenya.com, which at the time of submission ranked 295338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/04/2008. It ...

PHP-Nuke Yellow_Pages Module - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke Yellow_Pages Module - cid SQL Injection

PHP-Nuke YellowPages Module - cid SQL Injection source: https://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

phpYellowTM Pro Edition SQL inj. vuln.

phpYellowTM Pro Edition SQL inj. vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html Vendor:http://phpyellow.com/ affected version: phpYellowTM Pro Edition 5.33 and phpYellowTM Lite Edition 5.33 Product...

yellow pages unauthorized access

Vulnerabilities in ypserv and ypxfrd allows file system access with root privileges...

HP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (2)

HP-UX 10.x/11.x,IRIX 3.x/4.x/5.x/6.x,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1.x RPC.YPUpdated Command Execution 2 source: https://www.securityfocus.com/bid/1749/info The 'rpc.ypupdated' deamon is part of the Network Information Service NIS or Yellow Pages YP. It allows clients to update NIS...