EXPL-A-2006-005 exploitlabs.com Retro Advisory 002 - SHTTPD: SHTTPD is vulnerable to an overly long GET request.
d3ac9730dc6805f0c45cac59d422fccfEXPL-A-2006-004 exploitlabs.com Advisory 049 - phpFormGenerator forces insecure usage of permissions for the application to work.
eb43566c33e9eb5cdb5bfdf9a35a95f9exploitlabs.com Advisory 047 - AspTopSites is susceptible to SQL injection attacks. Details on exploitation provided.
f9c2e8e3609609e6f71aa5bf40246ae8EXPL-A-2005-017 exploitlabs.com Advisory 046 - Dev hound suffers from multiple vulnerabilities including XSS and path disclosure.
19d65df37958a7f4e2ff7516fa1ef21eTellMe versions 1.2 and below are susceptible to cross site scripting attacks.
3ddd430c42f0a27aecf330497720b583Perldiver versions 1.x and 2.x suffer from cross site scripting flaws.
f972471c8c7a2fe83c55efcb0fab0724Mac OS X Weblog Server version 10.4.0 is susceptible to cross site scripting attacks.
e5ce4d28fb2dfcc5e952b605f9659858Site Studio guestbook does not filter HTML code from user-supplied input. A remote user can create a specially crafted entry that, when the page rendered, will cause arbitrary scripting to be executed by the user's browser.
5a2b722241399517731c7db31f88c06cH-Sphere allows for local username and password disclosure.
43a61bfcd185e2d238a5f6318b214871QuickBlogger version 1.4 and below is susceptible to a cross site scripting attack.
18983de17da8e48a7d3b604c10e0c7b6Cool Cafe Chat 1.2.1 suffers from a SQL injection vulnerability via an unsanitized password variable.
e392b48b21b9e092a495d83dbad304b0XAMPP contains multiple vulnerabilities, including default usernames / passwords and Cross-site scripting issues. Example exploit URLs provided as part of advisory.
6bba4395d9f460bc982e51b85993f88aAdventia Chat Server Pro 3.0 suffers from cross site scripting flaw.
a6956316d898034912852cfee77d9930E-Data 2.0 is susceptible to cross site scripting flaws in its search functionality.
ad56f701ddca6fb2c5f24d09ac98a9a8EXPL-A-2005-002 exploitlabs.com Advisory 031 - The Samsung ADSL Modem ships with default root, admin, and user accounts and also allows for arbitrary file access on the underlying filesystem.
6c2865c8bed350e5eb21b7d572dd1f9fEXPL-A-2005-001 exploitlabs.com Advisory 030 - A vulnerability in Microsoft Outlook Web Access allows malicious attackers to redirect the login to any URL they wish.
1e5022304657de2626e4ce60781930baSurgeMail 1.x is susceptible to a cross site scripting attack.
7d2e70cab8c22723c1d0d45e6265eb38Exploitlabs.com Advisory 27 - Microsoft Windows Help and Support Center has a vulnerability due to an unspecified input validation error. This can be exploited via the HCP protocol on Microsoft Windows XP and Microsoft Windows 2003 through Internet Explorer or Outlook and allows for arbitrary code execution.
69d0842c5d6c23ea20c9d1091c103d08