CVE-2011-4973

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...

Red5 Media Server Code Execution Vulnerability

Red5 Media Server is an open source and free streaming media server. A security vulnerability exists in AMF unmarshallers in Red5 Media Server versions prior to 1.0.8, which stems from a program that does not restrict classes when performing deserialization. A remote attacker can exploit this...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

Sql injection

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

The vulnerability is a SQL Injection in the open-source CMS Zenbership version 1.0.8, located in the admin/index.php handling the filters array parameter. The issue is exploitable by a privileged account, as described in CVE-2017-9759. The connected sources consistently report this exact flaw but...

Zenbership SQL Injection Vulnerability

Zenbership is an open source customer relationship management platform. A SQL injection vulnerability exists in Zenbership version 1.0.8. An attacker can exploit this vulnerability to obtain sensitive information from the database...

CVE-2017-5878

The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data...

UBUNTU-CVE-2017-5878

The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data...

mrlg4php Code Injection Vulnerability

mrlg4php is a set of PHP programs for connecting to routers. A code injection vulnerability exists in the mrlg-lib.php file in versions of mrlg4php prior to 1.0.8. A remote attacker can exploit this vulnerability to execute arbitrary shell code...

CVE-2017-5961

Ionize versions up to 1.0.8 (IONIZE CMS built on CodeIgniter) are affected by an XSS vulnerability due to insufficient filtration of user-supplied data in the path parameter of the URL to ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php. This could all...

FreeFTPd 'mkd' Denial of Service Vulnerability

FreeFTPd is a free FTP, FTPS, SFTP server product. The product supports remote file transfers and more. A denial of service vulnerability exists in freeFTPd version 1.0.8, which can be exploited by attackers to cause a denial of service program crash...

FreeFTPD 1.0.8 - 'mkd' Command Denial Of Service Exploit

Exploit for windows platform in category dos / poc from ftplib import FTP print ''' ,;'++';, '++++++++++++++++; .+++++++++++++++++++++++' ;++++++: :++++++: '++++' , +. :; . .'++++; :++++, '+ +.+.++':+:+ +: + :++++, ++++, + ++.++':+.+ +:'.+. :++++ ,+++; + +:':++',++,++.+:+ +, '+++. '+++ ++ ;+ ,+:'...

IonizeCMS Cross-Site Request Forgery Vulnerability

IonizeCMS is an open source PHP content manager. IonizeCMS 1.0.8 suffers from a cross-site request forgery vulnerability, which allows an attacker to construct specific URLs to lure a system administrator into accessing them in order to create a new account with administrator privileges...

WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure

WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure Exploit Title: WordPress Plugin Order Export Import for WooCommerce Link: https://wordpress.org/plugins/order-import-export-for-woocommerce/ Version: 1.0.8 Date: 19th 2016 Exploit Author: contact a david-peltier d...

WordPress IMDb Profile Widget 1.0.8 Plugin - Local File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage: https://wordpress.org/plugins/imdb-widget/...

Security update for roundcubemail (important)

Update to 1.0.8 - Add workaround for https://bugs.php.net/bug.php?id=70757 1490582 - Fix HTML sanitizer to skip !-- node type X -- in output 1490583 - Fix charset encoding of message/rfc822 part bodies 1490606 - Fix handling of message/rfc822 attachments on replies and forwards 1490607 - Fix PDF...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libXvMC-1.0.8 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

WordPress Plugin Spider Facebook - 'facebook.php' SQL Injection

source: https://www.securityfocus.com/bid/69675/info Spider Facebook plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...