exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 76 - 100 of 102

Files from Lostmon

flysprayXSS.txt

Posted Oct 27, 2005

Authored by Lostmon | Site lostmon.blogspot.com

Flyspray versions 0.9.7, 0.9.8, and 0.9.8-devel are susceptible to cross site scripting. Exploitation details included.

tags | exploit, xss

SHA-256 | 0bab5f01b7c758426334bbe468c48da3450971005b0015fe8140d3acfbc45c89

Download | Favorite | View

Comersus-BackOffice.txt

Posted Oct 21, 2005

Authored by Lostmon | Site lostmon.blogspot.com

Comersus BackOffice Plus contains many XSS vulnerabilities. Exploitation provided.

tags | advisory, vulnerability

SHA-256 | 8532dfd39a7c83827ae82ebd4b5879756ce29fc64d579d3c6380ad47b885de18

Download | Favorite | View

cubecart-3.0.3.txt

Posted Sep 29, 2005

Authored by Lostmon | Site lostmon.blogspot.com

CubeCart 3.0.3 contains a flaw that allows a remote cross site scripting attack. Exploitation provided.

tags | exploit, remote, xss

SHA-256 | daf62f753ab5e93ca8f1a204b23c6ef865d68a6375b29cb6ef28102bbb6e7c60

Download | Favorite | View

SpymacWebOsv4.0.txt

Posted Sep 20, 2005

Authored by Lostmon | Site lostmon.blogspot.com

Spymac Web Os v4.0 suffers from multiple XSS vulnerabilities.

tags | advisory, web, vulnerability

SHA-256 | 7880d5ee300092ed58b760fb7f3be1e1b3f52296ae146a2467cf93fc4759fa56

Download | Favorite | View

spymac-web-os-40-variable-xss.txt

Posted Sep 13, 2005

Authored by Lostmon

Spymac Web Os 4.0 is susceptible to cross site scripting attacks due to a lack of variable sanitization.

tags | exploit, web, xss

SHA-256 | 0680e9e980fd465ffff08943d784651f353f1a506461ba31c3acdc16803c3af6

Download | Favorite | View

paypalFlaw.txt

Posted Aug 14, 2005

Authored by Lostmon, FalconDeOro

Paypal suffers from a price manipulation flaw via buttons.

tags | exploit

SHA-256 | 211444247900f329944ae021c4d844567452d60e0caf32e802160f31bad4fd83

Download | Favorite | View

bookreviewXSS.txt

Posted Aug 14, 2005

Authored by Lostmon

BookReview 1.0 is susceptible to multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | 18b1301ed5452fdb6ef81f18d76a51f4d9525dfc0f5a7e56dfda44f95f976cf7

Download | Favorite | View

comersusXSSsql.txt

Posted Aug 14, 2005

Authored by Lostmon

Spread The Word, a Comersus based bookstore, is susceptible to multiple cross site scripting and SQL injection flaws.

tags | exploit, xss, sql injection

SHA-256 | 57696cdb63045dd868bfebec4811e33ab2334d0c93c9fda6c902d855e90e7acf

Download | Favorite | View

TOPo22.txt

Posted Aug 14, 2005

Authored by Lostmon

TOPo 2.2 is susceptible to various cross site scripting attacks.

tags | exploit, xss

SHA-256 | b531d44a617f4f2b75630324ec8316af9de83507ea117031096a99c978abc086

Download | Favorite | View

dvbbsXSS.txt

Posted Aug 9, 2005

Authored by Lostmon

DVBBS version 7.1 suffers from a cross site scripting flaw.

tags | exploit, xss

SHA-256 | 8d5df1ee1f1202ce0205c6854b4ca77d2cfacba0817b1756556a5d5369185cd5

Download | Favorite | View

quickForum.txt

Posted Aug 7, 2005

Authored by Lostmon

QuickForum 2.1.6 suffers from cross site scripting and SQL injection flaws.

tags | exploit, xss, sql injection

SHA-256 | 82bf64c287e3b0da111c7129f089219add896b6b657e01288fed7a6ea4e4b550

Download | Favorite | View

quickCart.txt

Posted Aug 7, 2005

Authored by Lostmon

QuickCart version 0.3.0 is susceptible to cross site scripting and SQL injection attacks.

tags | exploit, xss, sql injection

SHA-256 | 4f730d2c05628351a02ce0ff8cb873b18c40796f43df719100e677d5526ecb59

Download | Favorite | View

NukeETXSS.txt

Posted Aug 7, 2005

Authored by Lostmon

NukeET versions prior to 3.2 are susceptible to cross site scripting.

tags | exploit, xss

SHA-256 | ff8e369cfe16f919ab85898c6914337ad74c471b3aed670cc76c80eae283cba0

Download | Favorite | View

codethatFlaws.txt

Posted Aug 7, 2005

Authored by Lostmon

CodeThat Shopping Cart suffers from cross site scripting, SQL injection, and remote command execution vulnerabilities. Full exploitation details provided.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | c865804e988e47312fd3a8324516f7faaa83f039f13268e59942cccfbb05e116

Download | Favorite | View

JaxXSS.txt

Posted Aug 6, 2005

Authored by Lostmon

Various Jax PHP scripts suffer from a multitude of cross site scripting vulnerabilities. Detailed exploitation provided.

tags | exploit, php, vulnerability, xss

SHA-256 | 15b03ab0a2c065863d7b0e624494620518775990929ba694978ad49cb2903584

Download | Favorite | View

atmailXSS.txt

Posted Jul 28, 2005

Authored by Lostmon

@Mail 4.03 WebMail for Windows and 4.11 for Unix variants suffers from multiple cross site scripting flaws. Detailed exploitation provided.

tags | exploit, xss

systems | windows, unix

SHA-256 | e7d45ee0b78d0b31102938dd2bfec6cb78c5dc938ca19586df1e1abc829b6175

Download | Favorite | View

cleverAccess.txt

Posted Jul 28, 2005

Authored by Lostmon

Clever Copy contains a flaw that allows for unauthorized reading and deletion of private message from other users. Versions 2.0 and 2.0a are affected.

tags | advisory

SHA-256 | cee6aa9d03d9edb950fbb011536da583d407b1e927dcf7183fbede8e4b96685d

Download | Favorite | View

cleverNotSo.txt

Posted Jul 28, 2005

Authored by Lostmon

Clever Copy suffers from multiple cross site scripting and path disclosure flaws. Versions 2.0 and 2.0a are affected.

tags | exploit, xss

SHA-256 | f8361167214508e7b7908f034dc5d4028f06638ffdf5ed43ac11e033d97286fb

Download | Favorite | View

bmforumXSS.txt

Posted Jul 28, 2005

Authored by Lostmon

BMForum Datium! 3.0 RC1-4, Plus! 3.0 RC1-4, Plus! 2.6.1, and PlusMX 3.0.0.5 all suffer from multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | d3b2143c60bb09f3023734011cae42cd0b588014515e61c578f8f0df1bd2bcdc

Download | Favorite | View

CMSimpleXSS.txt

Posted Jul 21, 2005

Authored by Lostmon

CMSimple versions 2.4 and below are susceptible to cross site scripting attacks. Exploitation details provided.

tags | exploit, xss

SHA-256 | ac5fd80af7327965eade344735d47989fe407c7d846f5b82c9581eed9c67f1b4

Download | Favorite | View

cleverXSS.txt

Posted Jul 15, 2005

Authored by Lostmon

Clever copy versions 2.0 and 2.0a suffer from a cross site scripting flaw in calendar.php.

tags | exploit, php, xss

SHA-256 | 4eda9d532c37170e251abb6ef9f0a134d2ea8c65a02ef39b80c3169cd29d3476

Download | Favorite | View

payproXSS.txt

Posted Jun 1, 2005

Authored by Lostmon

PayProCart versions 3.0 and below suffer from multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | d3290939d4dbf61bb90cdf17383c0e72a809f38a0a5aecbfd15e950038d1445f

Download | Favorite | View

oneworldSQL.txt

Posted Jun 1, 2005

Authored by Lostmon

The OneWorldStore DisplayResults.asp sIDSearch variable is susceptible to cross site scripting and SQL injection flaws.

tags | exploit, xss, sql injection, asp

SHA-256 | 5bb44ed8ca6c1e27b1ea02ad14ecafa9cf4900dfb2301cc24119672bfea9eed4

Download | Favorite | View

google_adsense_css.txt

Posted May 7, 2005

Authored by Lostmon | Site lostmon.blogspot.com

Google adsense is vulnerable to remote cross-site scripting attacks. This is due to several name and message fields not being properly validated.

tags | advisory, remote, xss

SHA-256 | 1d9f0a3ba37186bf2960e4947afdb38a5e9e8dd89100de61267b3f9ac65f6db1

Download | Favorite | View

phpcart_price_manipulation.txt

Posted May 7, 2005

Authored by Lostmon | Site lostmon.blogspot.com

PHPcart allows for user-manipulation of the price's of items in the shopping cart.

tags | advisory

SHA-256 | 2e0e2cbc123be6aaf5914c8b302c535b34de75fd2bf0edc6cc0b96e3075b00d7

Download | Favorite | View