DSA-2101-1 wireshark - several vulnerabilities

Bulletin has no description...

Atomic Photo Album 1.0.2 SQL Injection / Cross Site Scripting

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

OpenTTD 'NetworkSyncCommandQueue()' Denial of Service Vulnerability

This host is installed with OpenTTD and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodopenttddosvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD 'NetworkSyncCommandQueue' Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

Orbis 1.0.2 Authentication Bypass

------------------------------------------------------------------------ Software................Orbis 1.0.2 Vulnerability...........Authentication Bypass Download................http://www.novo-ws.com/orbis-cms/ Release Date............7/11/2010 Tested On...............Windows Vista + XAMPP...

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Sun 11 Jul 2010 08:08:10 PM EEST Vendor: http://www.novo-ws.com/orbis-cms/ Download: http://www.ohloh.net/p/orbis-cms/download?filename=orbis-1.0.2.zip --- -= CSRF PoC 1 - Change Admin Password =- Orbis CMS 1.0.2 Multiple...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

bbPress 1.0.2 Cross Site Request Forgery

: Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com admin Key Master Hotmail: Free, trusted and rich email service...

Joomla FDione Form Wizard 1.0.2 Local File Inclusion

----------------------------------------------------------------------------------------- Joomla Component FDione Form Wizard lfi vulnerability ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com Date :...

Burning Board Lite 1.0.2 - Arbitrary File Upload

Burning Board Lite 1.0.2 - Arbitrary File Upload ======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Power...

PotatoNews 1.0.2 - nid Multiple Local File Inclusions

PotatoNews 1.0.2 - nid Multiple Local File Inclusions source: https://www.securityfocus.com/bid/39276/info PotatoNews is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain...

PotatoNews 1.0.2 Local File Inclusion

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- PotatoNews 1.0.2 Multiple Local File Include Vulnerability Script: http://code.google.com/p/potato-news/ Author: mat Mail: [email protected]...

eStore 1.0.2 SQL Injection

===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x Web : www.sux0r.net x Download:...

eStore 1.0.2 - SQL Injection

eStore 1.0.2 - SQL Injection ===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x Web :...

eStore 1.0.2 - SQL Injection

===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x Web : www.sux0r.net x Download:...

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities (2)

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities 2 source: https://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

Sql injection

SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...