759 matches found
MantisBT Multiple Cross-site scripting Vulnerabilities
This host is running MantisBT and is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmantismultxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MantisBT Multiple Cross-site scripting Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...
MantisBT < 1.2.3 Multiple XSS Vulnerabilities
MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2010-3763
Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...
Fedora 14 : Django-1.2.3-1.fc14 (2010-14745)
' Today the Django team has released Django 1.2.3, which remedies several issues with the recent 1.2.2 package. This package corrects the following problems : - The patch applied for the security issue covered in Django 1.2.2 caused issues with non-ASCII responses using CSRF tokens. This has been...
Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities
Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://www.joomla-clantools.de/downloads/docdownload/7-clantools-123.html Version: 1.2.3 Vulnerability 1...
Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
No description provided by source. Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://www.joomla-clantools.de/downloads/docdownload/7-clantools-123.html Version: 1.2.3...
Joomla Component com_clantools version 1.2.3 Multiple Blind SQL Injection
Exploit for php platform in category web applications ========================================================================= Joomla Component comclantools version 1.2.3 Multiple Blind SQL Injection ========================================================================= Exploit Title: Joomla...
CVE-2010-2677
Open Web Analytics (OWA) 1.2.3 is affected by a PHP remote file inclusion due to mw_plugin.php, where enabling register_globals and disabling magic_quotes_gpc allows an attacker to execute arbitrary PHP code via a URL in the IP parameter. The root cause is improper handling of user input in the R...
Fedora 13 : zikula-1.2.3-1.fc13 (2010-8501)
Upstream pushed this release to fix two security issues one XSS, and one CSRF Upstream also removed a non-free JavaScript library that we previously had to strip. http://community.zikula.org/module-News-display-sid-3012.htm Note that Tenable Network Security has extracted the preceding descriptio...
Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)
Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...
Fedora 11 : konversation-1.2.3-1.fc11 (2010-1883)
Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...
PunBB Private Message System <= 1.2.3 XSS Vulnerability (5)
Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...
Zikula < 1.2.3 Multiple XSS and CSRF Vulnerabilities
Zikula is prone to multiple cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Firebird SQL <= 1.2.3 XSS Vulnerability
Exploit for php platform in category web applications ======================================= Firebird SQL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm TheExploited member from...
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...
Wireshark Multiple Denial Of Service Vulnerabilities - Nov09 (Windows)
This host is installed with Wireshark and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnnov09win.nasl 4906 2017-01-02 13:06:55Z teissa $ Wireshark Multiple Denial Of Service Vulnerabilities - Nov09 Windows Authors: Antu Sanadi...
Sql injection
Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow 1 remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and 2 remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an editlink action to...
PT-2009-5712 · Plume · Plume Cms
Name of the Vulnerable Software and Affected Versions: Plume CMS version 1.2.3 Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the "m" parameter to "manager/index.php" or by remote authenticated administrators via the "id"...
PHP web alerts, a variety of PHP application\0 filter vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: When the PHP program with the specified PATH, in the PATH of the file Backdoor was added%0 0 can upload any file. Test procedure: NEATPIC PHP directory direct-reading version 1.2.3 http://web.cncode.com/SoftView.asp?SoftID=1820 This document participants: Vulnerability...
