Joomla! Component com_pandafminigames - SQL Injection

Exploit Title: Joomla Component compandafminigames SQL Injection Vulnerabilities Date: 16.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |::...

Joomla! Component JoltCard 1.2.1 - SQL Injection

Exploit Title: Joomla Component comjoltcard SQL Injection Vulnerability Date: 17.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

OnePC mySite Management Software SQL Injection

Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by Valentin Hoebel :: [email protected]...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Joomla! Component mv_restaurantmenumanager - SQL Injection

Joomla! Component mvrestaurantmenumanager - SQL Injection ========================================================= Joomla component mvrestaurantmenumanager SQL injection Vulnerability ========================================================= Exploit Title : joomla component mvrestaurantmenumanag...

Joomla! Component mv_restaurantmenumanager - SQL Injection

========================================================= Joomla component mvrestaurantmenumanager SQL injection Vulnerability ========================================================= Exploit Title : joomla component mvrestaurantmenumanager SQL injection Vulnerability Date : 12 april 2010 Author...

ShopSystem - SQL Injection

Exploit Title: ShopSystem SQL Injection vulnerability Date: 05.04.2010 Author: Valentin Category: webapps/0day :: General information :: ShopSystem SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = ShopSystem :: Vendor = ShopSystems :: Vend...

Joomla Component com_personal SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component compersonal SQL Injection Vulnerability ========================================================= Title : Joomla Component compersonal SQL Injection Vulnerability Autho...

Devana - SQL Injection

Devana - SQL Injection Exploit Title: Devana SQL Injection vulnerability Date: 28.03.2010 Author: Valentin Category: webapps/0day Version: Tested on: Debian lenny, Apache2, MySQL5 CVE : Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel ::...

Devana - SQL Injection

Exploit Title: Devana SQL Injection vulnerability Date: 28.03.2010 Author: Valentin Category: webapps/0day Version: Tested on: Debian lenny, Apache2, MySQL5 CVE : Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel :: [email protected] :: Product...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

openSUSE Security Update : struts (struts-1530)

This update of struts fixes a regression caused by the last security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update struts-1530. The text description of this plugin is C SUSE LLC...

SLES10: Security update for Java Struts

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: struts struts-javadoc struts-manual struts-webapps-tomcat5 More details may also be found by searching for the SuSE Enterprise Server 10 patch database locat...

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload File Upload POC Backup Exec System Recovery Manager 7.0File Upload POC :8443/axis/FileUpload" method="post" enctype="multipart/form-data" Remote Path: File to upload: cBastardLabs 2008. milw0rm.com 2008-02-07...

DSA-1468-1 tomcat5.5

Bulletin has no description...

pdflib long filename multiple bufferoverflows

hi, pdflib, a library for generating PDF on the fly, avilable at http:// www.pdflib.com, is vulnerable to multiple bufferoverflows due to a misuse of strcpy. An attacker can exploit this issue to execute arbitrary code or to crash the application that uses the library. One of the vulnerable...

Mort Bay Jetty Dump Servlet (webapps/test/jsp/dump.jsp) XSS

The remote instance of Mort Bay Jetty includes a test servlet, 'webapps/test/jsp/dump.jsp', that fails to sanitize user-supplied input before using it to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a...

Unfixed XSS vulnerability at www.hillsdale.edu

Security researcher Codes, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.hillsdale.edu, which at the time of submission ranked 164035 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is current...