5368 matches found
PHPRunner 4.2 (SearchOption) Blind SQL Injection Vulnerability
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: PHPRunner SQL Injection Vendor: http://www.xlinesoft.com Vulnerable Version: 4.2 prior versions also may be affected Exploitation: Remote with browser Original Advisory: http://www.bugreport.ir/index63.htm...
PHPRunner 4.2 - 'SearchOption' Blind SQL Injection
www.BugReport.ir AmnPardaz Security Research Team Title: PHPRunner SQL Injection Vendor: http://www.xlinesoft.com Vulnerable Version: 4.2 prior versions also may be affected Exploitation: Remote with browser Original Advisory: http://www.bugreport.ir/index63.htm Fix: N/A - Description: PHPRunner...
[ECHO_ADV_104$2009] WeBid <= 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities
ECHOADV104$2009 ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities ----------------------------------------------------------------------------------------- Author : K-159 Date ...
Moving-2 0 0 6 a few small flaws-vulnerability warning-the black bar safety net
The author of the article: the falling leaves swirlingJJSEX Information source: http://hi.baidu.com/jluoye Now they move easy companies are taking action easy content management system open source, Hey However with the move-2 0 0 6 people is still a lot, my hand on the SWI 0day almost never used,...
BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV102$2009 ----------------------------------------------------------------------------------------- ECHOADV102$2009 BusinessSpace = 1.2 id Remote SQL Injection Vulnerability...
NaviCOPA Web Server远程堆溢出和源码泄露漏洞
BUGTRAQ ID: 33585 NaviCOPA Web Server是一款安装在Windows系统上的Web服务器，可以自动配置HTTP访问。 如果远程攻击者向NaviCOPA Web Server提交了超长的HTTP GET请求的话，就可以触发堆溢出，导致执行任意代码；此外向服务器提交包含有圆点字符的特制HTTP请求还可以泄露PHP脚本的源码。 InterVations NaviCOPA Web Server 3.01 厂商补丁： InterVations ------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
NaviCOPA Trailing Dot Source Code Disclosure
The version of the NaviCOPA web server software running on the remote host returns the source of scripts hosted on it if the URL ends in a dot '.'. A remote attacker can leverage this issue to view the source code of CGIs and possibly obtain passwords and other sensitive information from this hos...
SuSE Update for mono-web SUSE-SA:2007:002
Check for the Version of mono-web OpenVAS Vulnerability Test $Id: gbsuse2007002.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for mono-web SUSE-SA:2007:002 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Code injection
front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...
CVE-2008-5936
CVE-2008-5936 affects front-end/edit.php in mini-pub 0.3 and earlier. The vulnerability allows remote attackers to read files and obtain PHP source code by manipulating the sFileName parameter, exposing partial confidentiality impact. The CVSS score is provided as 5.0 (MEDIUM) with network vector...
netsurf Web browser 1.2 - Multiple Vulnerabilities
netsurf Web browser 1.2 - Multiple Vulnerabilities -------------------------------------------------------------------------------------------------------------------------------------------- Jeremy Brown 01-14-2009 [email protected]/jbrownsec.blogspot.com netsurfmultipleadv.txt...
FreeLyrics 1.0 File Disclosure
Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...
phpwind V7. 0 XSS vulnerabilities-vulnerability warning-the black bar safety net
http://site/upload2/admin.php?adminjob=%22%3E%3Cscript%3Ealert%27hiphop%2 7%3C/script%3E ! $REQUESTURI = $SERVER'PHPSELF'.'?'.$ SERVER'QUERYSTRING'; $windversion = '7.0'; $windrepair = "; From the outside any QUERYSTRING didn't do the filter leads to vulnerability ============================== S...
chicomas <= 2.0.4 (DB Backup/DD/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: chicomas =2.0.4 Multiple Vulnerabilities Vendor: http://www.chicomas.com/ Demo: http://demo.opensourcecms.com/chicomas Bug: Database Information Disclosure, Authorization Weakness, XSS Vulnerable Version:...
Chicomas 2.0.4 - Database Backup / File Disclosure / Cross-Site Scripting
www.BugReport.ir AmnPardaz Security Research Team Title: chicomas Dtabase Information Disclosure POC: http://URL/chicomas/config.inc +--The Latest generated Database backups POC: http://URL/chicomas/backup +--Cross Site Scripting XSS. Reflected XSS attack in "index.php" in "q" parameter. POC:...
FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability
No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...
FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================== FreeLyrics 1.0 source.php p Remote File Disclosure Vulnerability ================================================================== FreeLyrics Remote Source Code Disclosure...
FreeLyrics 1.0 - Remote File Disclosure
Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...
FreeLyrics 1.0 - Remote File Disclosure
FreeLyrics 1.0 - Remote File Disclosure Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...