CVE-2010-2217

Adobe Flash Media Server (FMS) is affected by CVE-2010-2217. Versions prior to 3.0.6 and 3.5.x prior to 3.5.4 are vulnerable due to a JavaScript method vulnerability that could allow arbitrary code execution. The NVD and Red Hat entries describe the impact as remote code execution with high sever...

CVE-2010-2217: Improper Control of Generation of Code

Adobe Flash Media Server FMS before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."...

CVE-2010-2218: Undefined Security Weakness

Adobe Flash Media Server FMS before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."...

Intellinet IP Camera MNC-L10 - Authentication Bypass

by Magnefikko Discovered: 25.01.2009 Publication: 01.08.2010 [email protected] Promhyl Studies :: http://promhyl.tk Inj3ct0r Team :: http://inj3ct0r.com Subgroup: PRekambr Name: Intellinet IP Camera Admin Access Platform: Intellinet IP Camera MNC-L10 and other ...:: Exploit ::... JS is require...

Joomla JS Jobs 1.0.5.8 SQL Injection

by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link:...

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link: http://www.joomsky.com/index.php?option=comrokdownloads&view=file&task=download&id=23%3Ajs-jobs&Itemid=4 Version:...

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection

Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link: http://www.joomsky.com/index.php?option=comrokdownloads&view=file&task=download&id=23%3Ajs-jobs&Itemid=4 Version: 1.0.5.8 Tested on: Linux ubuntu32 2.6.32-22-generic...

Ane CMS Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ Ane CMS Multiple Vulnerabilities ================================ www.BugReport.ir AmnPardaz Security Research Team Title: AneCMS Multiple Vulnerabilities Vendor: http://anecms.com/ Vulnerable Version: 1.0 Late...

Directory traversal

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314

Joomla! component Highslide JS com_hsconfig (versions 1.5 and 2.0.9) contains a Local File Inclusion via the controller parameter to index.php, enabling a directory traversal (..). This allows reading arbitrary server files. The NUCLEI template confirms the vulnerability and notes remediation as ...

CVE-2010-1314

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

Joomla Component Highslide JS com_hsconfig Local File Inclusion

Exploit for php platform in category web applications ============================================================================= Joomla Component Highslide JS comhsconfig Local File Inclusion Vulnerability =============================================================================...

Joomla Highslide JS 1.5 Local File Inclusion

=============================================================================================================== o Joomla Component Highslide JS Local File Inclusion Vulnerability Software : comhsconfig version 1.5 Vendor : http://www.joomlanook.com/ Author : AntiSecurity s4va NoGe Vrs-hCk OoNBoY...

CVE-2010-0165: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service memory corruption and application crash and possibly execute arbitrary code via vectors involving certain indirect...

Security Wei Bo imitation Taobao multi-user Mall program v7. 2 vulnerability-vulnerability warning-the black bar safety net

==Estimation of many a fancy to Taobao guest number of procedures. A relatively simple system. Program all types of variables are character type, use the Password = replacerequest. form"password","'","" a similar such statement to filter single quotes, and don't know which bit of large cattle hav...

CVE-2010-0759: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...

CVE-2009-4599

Multiple SQL injection vulnerabilities in the JS Jobs comjsjobs component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the md parameter in an employer viewcompany action to index.php or 2 the oi parameter in an employer viewjob action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the JS Jobs comjsjobs component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the md parameter in an employer viewcompany action to index.php or 2 the oi parameter in an employer viewjob action to index.php...