LinPHA 1.3.2/1.3.3 new_images.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these issues to execute arbitrary script code in the...

LinPHA 1.3.2/1.3.3 login.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these issues to execute arbitrary script code in the...

WordPress Facebook Promotions plugin <= 1.3.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Facebook Promotions plugin = 1.3.3 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/fbpromotions.1.3.3.zip Version: 1.3.3...

CVE-2014-3004

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

Xxe

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

Castor Library - XML External Entity Information Disclosure

Castor Library - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/67676/info Castor Library is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Caster...

ProFTPD 1.3.3 后门漏洞

No description provided by source...

CVE-2013-4116

lib/npm.js in Node Packaged Modules npm before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives...

Candlepin: bootstrap RPM deploys CA certificate file with mode 666

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions 666 for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file...

JVN#78601526: GREE for Android vulnerable to directory traversal

GREE for Android contains an issue in handling URL inputs, which may result in a directory traversal vulnerability. Impact If a user of the affected product uses another malicious Android application, information managed by the affected product may be disclosed. Solution Update the software Updat...

MotoCMS - 'admin/data/users.xml' Access Restriction / Information Disclosure

source: https://www.securityfocus.com/bid/57055/info MotoCMS is prone to a file-disclosure and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload a file and view local files in the context of the web server process, which may aid in further attacks. MotoCMS 1.3...

phpMyDirectory 'id' Parameter SQL Injection Vulnerability

phpMyDirectory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for python-django MDVSA-2012:143 (python-django)

Check for the Version of python-django OpenVAS Vulnerability Test Mandriva Update for python-django MDVSA-2012:143 python-django Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

phpMyDirectory.com 1.3.3 - SQL Injection

Exploit Title: phpMyDirectory.com v. 1.3.3 SQL Injection Google Dork: phpMyDirectory.com v. 1.3.3 Location : Türkiye Date: 08/01/20112 Version: v. 1.3.3 Author: Serseri | www.imhatimi.org | Biri Bizimi Çaðýrdý J Software Link: http://www.phpmydirectory.com/ Exploit...

CVE-2011-4024

Cross-site scripting XSS vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Facebook Promotions 1.3.3 SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

wodWebServer.NET 1.3.3 Directory Traversal

A directory traversal vulnerability in wodWebServer.NET can be exploited to read files outside of the web root. wodWebServer.NET 1.3.3 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id: gbwodWebServer133.nasl 7276 2017-09-26 11:59:52Z cfischer $ wodWebServer.NET...

Prestashop Cartium 1.3.3 Cross Site Scripting

Hello, In Prestashop Cartium 1.3.3 I have detected multiple Cross Site Scripting XSS vulnerabilities: File Field categoty.php idcategory product.php idproduct search.php searchquery Test pattern for vulnerable versions: "alert1 Kind Regards Antonio San Martino...

prestashop vuln: sql injection

Vulnerable software and vendor Prestashop verion: 1.3.3 - 0.246s Vulnerable File Vulnerable Field category.php idcategory cart.php idproduct product.php idproduct 2. Vulnerability classification Sql Injection 3. Vulnerability details and reproduction steps, if you want to disclosure it. just...