Honey Soft Web Solution Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------- Honey Soft detail.php?proddetail= & products.php?catid= SQL-i/XSS Multiple Vulnerabilities...

PHP Hash Table Collision Proof Of Concept

No description provided by source. ! /usr/bin/env python This script was written by Christian Mehlmauer [email protected] https://twitter.com/!/FireFart Sourcecode online at: https://github.com/FireFart/HashCollision-DOS-POC Original PHP Payloadgenerator taken from...

RHEL 5 / 6 : Red Hat JBoss Web Server 2.0.1 tomcat6 (RHSA-2014:0525)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0525 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...

OSSIM < 4.3.2 Multiple SQL Injection Vulnerabilities

The version of OSSIM hosted on the remote host has multiple SQL injection vulnerabilities due to a failure to sanitize the 'datefrom' parameter to multiple scripts in the '/RadarReport' and '/geoloc' paths. A remote, unauthenticated attacker could potentially exploit this vulnerability to execute...

ZyXEL ADSL Router Multiple Vulnerabilities (Jun 2014) - Active Check

ZyXEL ADSL Routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WebTitan Multiple Security Vulnerabilities

WebTitan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Assesi 'bg' Parameter SQL Injection vulnerability

Assesi is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : dovecot-2.2.13-1.fc19 (2014-6331)

Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging arond for a long time. Affected Dovecot...

OSSIM tele_compress.php Directory Traversal

The OSSIM install hosted on the remote host has a directory traversal vulnerability. Input to the 'timestamp' parameter of the '/ossim/ocsreports/telecompress.php' script is not properly sanitized. A remote attacker could exploit this to download arbitrary files, subject to the privileges under...

Fedora 19 : php-horde-Horde-Ldap-2.0.6-1.fc19 (2014-7228)

jan SECURITY: Stricter parameter check in bind to detect empty passwords. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Participants Database Plugin for WordPress < 1.5.4.9 'query' Parameter SQL Injection

The Participants Database Plugin for WordPress installed on the remote host is prior to version 1.5.4.9. It is, therefore, affected by a SQL injection vulnerability due to failure to properly sanitize user-supplied input to the 'query' parameter in the 'pdb-signup' script. A remote, unauthenticat...

ZeroCMS Privilege Escalation & SQL Injection Vulnerabilities

ZeroCMS is prone to privilege escalation, cross-site scripting and sql injection vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Fedora 20 : php-horde-Horde-Ldap-2.0.6-1.fc20 (2014-7080)

jan SECURITY: Stricter parameter check in bind to detect empty passwords. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Transform Foundation Server Multiple XSS Vulnerabilities (Jun 2014) - Active Check

Transform Foundation Server is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress WP-Ecommerce with Bradesco Gateway 'falha.php' XSS Vulnerability

WordPress WP-Ecommerce with Bradesco Gateway Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora 19 : mediawiki-1.21.10-1.fc19 (2014-6962)

bug 65501 SECURITY: Don't parse usernames as wikitext on Special:PasswordReset. - bug 36356 Add space between two feed links. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

XOOPS Glossaire Module 'glossaire-aff.php' SQL Injection Vulnerability

XOOPS module Glossaire is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Simple Popup Images Cross Site Scripting Vulnerability

WordPress Simple Popup Images Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

WordPress bib2html 'styleShortName' Cross Site Scripting Vulnerability

WordPress bib2html Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Conversion Ninja 'id' Parameter Cross Site Scripting Vulnerability

WordPress Conversion Ninja Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...