4227 matches found
Important: Red Hat Security Advisory: httpcomponents-client security update
Updated httpcomponents-client packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
iCopyright(R) Article Tools <= 1.1.4 - SQL Injection
The copyright-licensing-tools WordPress plugin was affected by a SQL Injection security vulnerability...
ca800.com XSS vulnerability
Open Bug Bounty ID: OBB-47112 Description| Value ---|--- Affected Website:| ca800.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
PT-2014-5728
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in a Submit Comment action, specifically targeting the zero transact article.php file...
CVE-2014-4195
Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...
PT-2014-5729
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the article id parameter in the zero view article.php file. Recommendations For...
Webster HTTP Server GET Buffer Overflow
No description provided by source. $Id: websterhttp.rb 10887 2010-11-03 12:19:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Article Directory 'login.php' SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37356/info Article Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Omnistar Article Manager Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...
ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article Date : 25-02-2012 Author : Ivano Binetti...
Joomla Front-End Article Manager System Upload Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Front-End Article Manager System Upload Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...
Article Script 1.6.3 RSS.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20929/info Article Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Bloginator 1a - SQL Command Injection via Cookie Bypass Exploit
No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...
phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class phNNTPRemoteFileIncludePOCBase: vulID = '63806' version = '1' vulDate = '2006-08-08' author = ' '...
Article Friendly 'filename' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...
IBM 1754 GCM 1.18.0.22011 - Remote Command Execution
No description provided by source. I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability...
php MBB cms 004 - Multiple Vulnerabilities
No description provided by source. MBB CMS = 004 LFI/SQLi Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script http://sourceforge.net/projects/phpmbbcms/ Tested : Windows / Linux Dork : N/A LFI MBBCMS/index.php ....... 22 ifisset$GET'mod' 23 $a=$GET'mod'; 24 switch$a 25 case $a: 26...
Article Dashboard 'admin/login.php' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27286/info Article Dashboard is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Article Management System 2.1.2 Reinstall Vulnerability
No description provided by source...
RV Article Publisher CSRF Vulnerability
No description provided by source. Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...