7278 matches found
PivotX password reset vulnerability
Overview The PivotX web content management system 2.2.3 and earlier is affected by a password reset vulnerability. Description PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be...
micecms a"tasteless"vulnerability and the Fix attached to the EXP-bug warning-the black bar safety net
| Not to say thisloophole. what are the requirements but directly change the administrator password such as you into the background after the real administrator are not more don't know the new password is what, so only tasteless Classic white look at the code！.......... index\setpwdAction.php The...
Concrete CMS 5.4.1.1 XSS / Code Execution
!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...
Concrete CMS 5.4.1.1 - Cross-Site Scripting Remote Code Execution
Concrete CMS 5.4.1.1 - Cross-Site Scripting Remote Code Execution !/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as...
Concrete CMS 5.4.1.1 - Cross-Site Scripting / Remote Code Execution
!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...
FreeBSD : Drupal Views plugin -- XSS (ff8b419a-0ffa-11e0-becc-0022156e8794)
Drupal security team reports : The Views module provides a flexible method for Drupal site designers to control how lists and tables of content are presented. Under certain circumstances, Views could display parts of the page path without escaping, resulting in a relected Cross Site Scripting XSS...
Pandora FMS Console Authentication Bypass
The Pandora FMS console hosted on the remote web server is affected by an authentication bypass vulnerability. The 'auto login hash password' feature allows third parties to authenticate using a combination of username and a shared secret. This shared secret is undefined by default, which means i...
chCounter 3.1.3 - SQL Injection
chCounter 3.1.3 - SQL Injection !/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache...
BPDirectory Business Directory authentication bypass vulnerability-vulnerability warning-the black bar safety net
BPDirectory is a website directory of the programcommercial the. BPDirectory presence verification bypass vulnerability that could lead to an attacker direct access to the administrator permissions. +info: BPDirectory Business Directory Authentication Bypass Vulnerability Author : v3n0m Site :...
CVE-2010-3851
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...
Online Grades Multiple Local File Include Vulnerabilities
Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the...
Online Grades Multiple <= 3.2.5 LFi Vulnerabilities
Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive nformation and to execute arbitrary local scripts in the context of the...
gausCMS Multiple Vulnerabilities
Exploit for asp platform in category web applications ================================ gausCMS Multiple Vulnerabilities ================================ Title : gausCMS Multiple Vulnerabilities Affected Version : Gaus CMS version 1.0 Discovery : www.abysssec.com Vendor :...
gausCMS - Multiple Vulnerabilities
gausCMS - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-21-gauscms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : gausCMS Multiple...
aradBlog Multiple Remote Vulnerabilities
Exploit for asp platform in category web applications ======================================== aradBlog Multiple Remote Vulnerabilities ======================================== Title : aradBlog Multiple Remote Vulnerabilities Affected Version : http://Example.com/downloads/uploa...
aradblog - Multiple Vulnerabilities
aradblog - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub10-aradblog-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : aradBlog Multiple...
CVE-2009-4987
CVE-2009-4987 affects Scripteen Free Image Hosting Script 2.3. The issue allows remote unauthenticated users to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a flow noted as a different vector from CVE-2008-3211. The available documents do not spec...
PT-2010-4096 · Cacti · Cacti
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7g Description: The issue allows remote attackers to inject arbitrary web script or HTML via the name element in an XML template to templates import.php. Additionally, remote authenticated administrators can inject...
NinkoBB - Cross-Site Request Forgery
Title: NinkoBB CSRF Vulnerability Author: ADEO Security Published: 30/06/2010 Version: 1.3RC5 Possible all versions Vendor: http://ninkobb.com Download: http://ninkobb.com/releases/?NinkoBB-1.3RC5.zip Description: "NinkoBB is an open source forum script written in the PHP language and uses a MySQ...