OTRS Local File Disclosure Vulnerability (OSA-2011-03)

Open Ticket Request System OTRS is prone to a local file disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/...

Radiant Infotech Nepal 2.x.x LFI / XSS / SQL Injection

+Title :.......Radiant Infotech Nepal 2.x.x Multiple Vulnerability +Author :......Net.Edit0r +Tested on :...Linux/PHP --------------------------------------------------------------------------- Founded by Net.Edit0r Team: Black Hat Group BHG Contact: [email protected] Home: http://Black-HG.O...

Solaris 10 (x86) : 145802-06

SunOS 5.10x86: ssh patch. Date this patch was last updated by Sun : Jun/03/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2011-0761

creationtimestamp| type| source ---|---|--- 2011-05-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35725...

Solaris 9 (sparc) : 112920-03

SunOS 5.9: libipp, lp, IKE Patch. Date this patch was last updated by Sun : Apr/08/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 145044-03

SunOS 5.10: ksh pfksh rksh xargs sh patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 145045-03

SunOS 5.10x86: ksh pfksh rksh xargs sh pa. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 146802-03

SunOS 5.10: ufs fs patch. Date this patch was last updated by Sun : May/31/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Unfixed XSS vulnerability at franmore.cafe24.com

Security researcher invisiblehacker, has submitted on 04/03/2011 a cross-site-scripting XSS vulnerability affecting franmore.cafe24.com, which at the time of submission ranked 2310 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It ...

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

Fedora 14 : phpMyAdmin-3.3.10-1.fc14 (2011-3737)

Changes for 3.3.10.0 2011-03-19 - structure Aria table size printed as unknown, thanks to erickoh75 - erickoh75 - structure Ordering by size gives incorrect results, thanks to Madhura Jayaratne - madhuracj - core 0 rows affected - core Edit relational page and page number - security Minor securit...

CVE-2011-1487

creationtimestamp| type| source ---|---|--- 2011-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35554...

DCS Self MNS Product SQL Injection

Title : DCS self MNS product SQL Injection Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : [email protected] date : 29/3/2011 d0rk:- DCS è un prodotto MNS completamente autogestito e dato in utilizzo al cliente presso i nostri server Web category : Web Apps...

Solaris 10 (x86) : 146859-01

SunOS 5.10x86: ssl patch. Date this patch was last updated by Sun : Mar/23/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/11/14. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Designscope SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Designscope SQL Injection Vulnerability Author : Net.Edit0r Email : email protected email protected Location : Iran Dork : "site by Designscope" Category : webapps Data : 2011-03-22 Download Script: www.designscope.com.au Platform...

Constructr CMS 3.03 - Arbitrary File Upload

Constructr CMS 3.03 - Arbitrary File Upload !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h4...

Unfixed XSS vulnerability at www.ljbc.net

Security researcher Dave, has submitted on 23/03/2011 a cross-site-scripting XSS vulnerability affecting www.ljbc.net, which at the time of submission ranked 1173899 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

CVE-2010-4777

creationtimestamp| type| source ---|---|--- 2011-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35489...

Unfixed XSS vulnerability at forums.yessoftware.com

Security researcher nullbyt3, has submitted on 23/03/2011 a cross-site-scripting XSS vulnerability affecting forums.yessoftware.com, which at the time of submission ranked 126149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...