WordPress Spider Calendar Plugin XSS Vulnerability

WordPress Spider Calendar Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Social Discussions Plugin Multiple Vulnerabilities

WordPress Social Discussions Plugin is prone to remote file inclusion and full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ManageEngine Support Center Plus < 7.9.x Multiple Vulnerabilities - Active Check

ManageEngine Support Center Plus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Spider Calendar Plugin Multiple SQLi Vulnerabilities

WordPress Spider Calendar Plugin is prone to multiple SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Zoho ManageEngine Support Center Plus Multiple Vulnerabilities

This host is running Zoho ManageEngine Support Center Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageenginesupportcenterplusmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Zoho ManageEngine Support Center Plus Multiple Vulnerabilities Authors: Antu Sanadi...

Ubuntu 8.04 LTS : python2.5 vulnerabilities (USN-1613-1)

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. CVE-2008-5983 It was discovered that the audioop module did not correctly perform...

Ubuntu 8.04 LTS : python2.4 vulnerabilities (USN-1613-2)

USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the corresponding updates for Python 2.4. It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit thi...

Internet Explorer 9 XSS Filter Bypass

Exploit for windows platform in category dos / poc Internet Explorer 9 XSS Filter Bypass Discovered by: Jean Pascal Pereira Vendor information: "Internet Explorer formerly Microsoft Internet Explorer and Windows Internet Explorer, commonly abbreviated IE or MSIE is a series of graphical web...

Cartweaver <= 3.0 LFI Vulnerability - Active Check

Cartweaver is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpMyDirectory 'id' Parameter SQL Injection Vulnerability

phpMyDirectory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 : python2.6 vulnerabilities (USN-1596-1)

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. CVE-2008-5983 It was discovered that the audioop module did not correctly perform...

Ubuntu 11.04 / 11.10 : python2.7 vulnerabilities (USN-1592-1)

Niels Heinen discovered that the urllib and urllib2 modules would process Location headers that specify a redirection to file: URLs. A remote attacker could exploit this to obtain sensitive information or cause a denial of service. This issue only affected Ubuntu 11.04. CVE-2011-1521 It was...

Switchvox Asterisk 5.1.2 Cross Site Scripting

Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...

php execution vulnerability parsing-vulnerability warning-the black bar safety net

A code to perform the function In PHP you can execute the Code of the function. Such as eval , assert , the“and system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: ? php echo dir; ?& gt; The second file contains the code injection The file containing...

OSClass < 2.3.5 Multiple Vulnerabilities - Active Check

OSClass is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only i...

F*EX (Frams's Fast File EXchange) < 20111129-2 Multiple XSS Vulnerabilities - Active Check

FEX Frams Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the...

SonicWall Viewpoint <= 6.0 SP2 SQLi Vulnerability - Active Check

SonicWall Viewpoint is prone to an SQL injection SQLi vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

This host is running SonicWall Viewpoint and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbsonicwallviewpointscheduleidsqlinjvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability Authors: Rachana Shetty...

Mac Photo Gallery for WordPress 'albid' Parameter Traversal Arbitrary File Access

The Mac Photo Gallery for WordPress hosted on the remote web server is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'albid' parameter of the 'macdownload.php' script. This vulnerability allows an unauthenticated, remote attacker to...

PHP FastCGI remote exploit-vulnerability warning-the black bar safety net

Speaking of FastCGI, we all know this is currently the most common webserver dynamic script execution model. Currently, substantially all of the web scripts are the basic support of this model, and even some type of script this is the only mode ROR, Python, etc. FastCGI's main aim is, the webserv...