PT-2011-2522

Name of the Vulnerable Software and Affected Versions PHPCMS 2008 V2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the modelid parameter to the "flash upload.php" endpoint. Recommendations For PHPCMS 2008 V2, consider restricting access to t...

CVE-2011-0644: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...

CVE-2011-0645: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the wheretime parameter in a get action...

PT-2011-1510

Name of the Vulnerable Software and Affected Versions SSSD versions 1.3 through 1.5.0 SSSD version 1.4.x Description The issue allows local users to cause a denial of service, resulting in an infinite loop, crash, and prevention of login, via a crafted packet. This is due to a problem in the pam...

PT-2011-2523

Name of the Vulnerable Software and Affected Versions PHPCMS 2008 V2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the where time parameter in a 'get' action, specifically targeting the data.php file. Recommendations For PHPCMS 2008 V2,...

SuSE 11.1 Security Update : ed (SAT Patch Number 3792)

This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

SuSE 11 / 11.1 Security Update : kdenetwork (SAT Patch Numbers 3563 / 3564)

This update of kdenetwork fixes several bugs, the security related issues are : - The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary directories. CVE-2010-1000: CVSS v2 Base Score: 4.3...

SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)

This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...

Easy Travel Portal 2 - 'travelbycountry.asp' SQL Injection

TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability PRODUCT: Easy Travel Portal v2 PRODUCT URL: http://www.softwebsnepal.com/travelwebsiteprogammingportal.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ VULN:...

ZYXEL P-660R-T1 V2 - 'HomeCurrent_Date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting us...

ZYXEL P-660R-T1 V2 - HomeCurrent_Date Cross-Site Scripting

ZYXEL P-660R-T1 V2 - HomeCurrentDate Cross-Site Scripting source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

ZyXEL P-660R-T1 V2 Cross Site Scripting

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...

ReOS v2 0 5 RFI Vulnerability

Exploit for php platform in category web applications ============================= ReOS v2 0 5 RFI Vulnerability ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3...

Free Adult Script V2 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Free Adult Script V2 SQL Injection Vulnerability ================================================ Exploit Title: Free Adult Script V2 SQL ©njection Vulnerability Date: 29.10.2010 Author: HeRoTu...

SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 6839)

This update of tomcat5/6 fixes : - Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2901: CVSS v2 Base Score: 4.3 When autoDeploy is enabled the autodeployment process deployed appBase files that...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

rapidCMS V2 backend authentication bypass vulnerability-vulnerability warning-the black bar safety net

rapidCMS V2 background login authentication has not been strictly filtered, resulting in Universal password bypass vulnerability. Use method: User: something Pass: 'OR '1'='1 Demo : http://site/admin.php...

rapidCMS V2 Authentication Bypass

Exploit for php platform in category web applications ================================= rapidCMS V2 Authentication Bypass ================================= Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux...

SuSE9 Security Update : Tomcat (YOU Patch Number 12585)

This update of tomcat5/6 fixes : - CVSS v2 Base Score: 5.8. CVE-2009-2693 - CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2902 - CVSS v2 Base Score: 4.3 When autoDeploy is...

Multi Auktions Komplett System 2 Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Multi Auktions Komplett System V2 1 ----------------------------------------------------------------------------------------- Exp...