Huge-IT Catalog Extension SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. Huge-IT Catalog is one of the extensions that showcases products in the most attractive way. A SQL injection vulnerability exists in version 1.0.7 of the Joomla! Huge-IT Catalog extension...

CVE-2016-1000154

Reflected XSS in wordpress plugin whizz v1.0.7...

PT-2016-4517 · Huge It · Huge-It Catalog

Name of the Vulnerable Software and Affected Versions: Huge-IT Catalog version 1.0.7 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.7, update to a newer version that contains a fix for this issue...

WordPress Abtest Local File Inclusion Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress Relevant Related Posts 1.0.7 Cross Site Scripting

Plugin Name : Relevant Related Posts Plugin Effected Version : 1.0.7 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields pu...

WordPress Polls Widget Plugin 1.0.7 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : wordpress poll widget version 1.0.7 SQL Injection vulnerability Author : WICS Date : 7/12/2015 Software Link : https://wordpress.org/plugins/polls-widget/ Affected Version: 1.0.7 and below Overview: Poll widget is wordpress...

Roundcube webmail cross-site scripting vulnerability

RoundCube Webmail is a browser-based IMAP client. A cross-site scripting vulnerability in program/js/app.js in Roundcube webmail versions prior to 1.0.7, 1.1.x-1.1.3 allows remote attackers to inject arbitrary web script or HTML by dragging and dropping the filename in a file upload...

UBUNTU-CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...

Updated roundcubemail packages fix security vulnerability

The roundcubemail package has been updated to version 1.0.7, which fixes a XSS issue in drag-n-drop file uploads and other bugs. See the upstream release announcement for more details...

[SECURITY] Fedora 21 Update: lxc-1.0.7-2.fc21

Linux Resource Containers provide process and resource isolation without the overhead of full virtualization...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the tetex-dvilj-1.0.7 package for the Red Hat Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gnupg-1.0.7 package for the Red Hat Enterprise Linux operating system can lead to violations of the confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The gnupg-1.0.7 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

libXv: Multiple integer overflows leading to heap-based bufer overflows

Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XvQueryPortAttributes, 2 XvListImageFormats, and 3 XvCreateImage function...

User Friendly SVN 'login' Cross Site Scripting Vulnerability

User Friendly SVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpMyRealty <= 1.0.7 - SQL Injection Vulnerability

No description provided by source. |=========================================================================================| Exploit Title: phpMyRealty = v. 1.0.7 SQL Injection Vulnerability Google Dork: intext:Sort By: Submission Date | Bedrooms | Bathrooms | Price ASC | Price DESC Date:...

tellmatic 1.0.7 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download :...

netserve web server 1.0.7 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9059/info It has been reported that NetServe may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitizati...

DEBIAN-CVE-2013-1999

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function...

MODX Evolution 1.0.7 (and prior) ForgotManager plugin Vulnerability

Product: MODX Evolution Risk: Very High Severity: Critical Versions: 1.0.7 Vulnerabilty Type: Permissions, Privileges, and Access Control; Input Validation; SQL Injection Report Date: 2013-Jan-4 Fixed Date: 2013-Jan-8 Description The Forgot Manager Login plugin distributed with all versions of MO...