CVE-2010-4987: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2011-1922

Name of the Vulnerable Software and Affected Versions KMSoft Guestbook aka GBook affected versions not specified Description A SQL injection issue exists in the default.asp file of KMSoft Guestbook, allowing remote attackers to execute arbitrary SQL commands by manipulating the p parameter in the...

ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 Administrative Access

ZOHO ManageEngine ADSelfService Plus Administrative Access ========================================================== ADVISORY INFORMATION Title: ZOHO ManageEngine ADSelfService Plus Administrative Access Release date: 10/10/2011 Last update: 10/10/2011 Credits: Roberto Paleari, Emaze Networks...

Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow

This module exploits a stack based buffer overflow found in Cytel Studio use exploit/windows/fileformat/cytel/studiocy3 msf undefinedstudiocy3 show actions ...actions... msf undefinedstudiocy3 set ACTION msf undefinedstudiocy3 show options ...show and set options... msf undefinedstudiocy3 run Thi...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2011-1754

Name of the Vulnerable Software and Affected Versions Webmatic affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index.php" endpoint. Recommendations At the moment, there is no information...

CVE-2010-4808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow Exploit Title：UUSEE ActiveX shellcode = unescape“%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800″ + “%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u1074%u0A6A” + “%u858D%u0114%u0000%uFF50%u0695%u0001%u6100%uC031%uC489%uC350″ +...

DSA-2226-1 libmodplug - buffer overflow

Bulletin has no description...

IDEAL Administration 2011 11.4 - Local Buffer Overflow (SEH)

IDEAL Administration 2011 11.4 - Local Buffer Overflow SEH !/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, anothe...

PT-2011-2864

Name of the Vulnerable Software and Affected Versions FocalMedia.Net Quick Polls versions prior to 1.0.2 Description The issue allows remote attackers to read or delete arbitrary files due to directory traversal vulnerabilities. This can be achieved by using a .. dot dot in the p parameter in...

CVE-2011-1099: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to 1 read arbitrary files via a .. dot dot in the p parameter in a preview action to index.php, or 2 delete arbitrary files via a .. dot dot in the p parameter in a delete action to...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...

CVE-2011-0909: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526...

PT-2011-2752

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component. Recommendations For versions prior to...

Cross site scripting

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

CVE-2010-3931

The CVE-2010-3931 entry corresponds to a cross-site scripting (XSS) vulnerability in multiple Rocomotion products (e.g., P board, P forum, P up board, P diary R, P link, pplog/pplog2, PM bbs/PM forum) across listed versions (e.g., P board 1.18 and earlier, P forum 1.30 and earlier, P up board 1.3...

CVE-2010-3931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

Cross-site scripting vulnerability in multiple Rocomotion products

Overview Multiple products provided by Rocomotion contain a cross-site scripting vulnerablility. Multiple products P board etc. provided by Rocomotion contain a cross-site scripting vulnerablility. Saeki Tominaga of KINOTROPE INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

PT-2010-5422

Name of the Vulnerable Software and Affected Versions Pulse CMS Basic versions prior to 1.2.9 Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the p parameter to "index.php". Recommendations For versions prior to...