CVE-2012-1402

Unspecified vulnerability in the QianXun YingShi com.qianxun.yingshi application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors...

CMS Faethon 1.3.4 - 'articles.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/52053/info CMS Faethon is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...

Apache Archiva 1.3.4 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)

The second release candidate for proftpd 1.3.4. This includes fixes for a number of security issues : - Plaintext command injection vulnerability in FTPS implementation - Badly formed SSH messages cause DoS - Limit recursion depth for untrusted regular expressions 673040 The update also contains ...

Mahara Cross Site Scripting and Cross Site Request Forgery Vulnerabilities

This host is running Mahara and is prone to cross site scripting and cross site request forgery vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmaharaxssncsrfvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Mahara Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

CVE-2010-4503

SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in an export action...

Sql injection

SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in an export action...

CVE-2010-4503

SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in an export action...

CVE-2010-4503

The CVE-2010-4503 issue affects Aigaion 1.3.4, where indexlight.php is vulnerable to an SQL injection via the ID parameter in an export action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with outcomes including potential data exposure or modification, as indicate...

Aigaion 1.3.4 <= Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Aigaion 1.3.4 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Membe...

Aigaion 1.3.4 SQL Injection

================================================================ GOOD DAY FOR INJ3CT0R 1337 Exploit Database ; ================================================================ Aigaion 1.3.4 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 +...

Punbb 1.3.4 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications ============================================== Punbb 1.3.4 Full Path Disclosure Vulnerability ============================================== Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCr...

Punbb 1.3.4 - Multiple Full Path Disclosures

Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file and the file /search.php,...

Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

PunBB 1.3.4 Pun_PM 1.2.6 - Blind SQL Injection

PunBB 1.3.4 PunPM 1.2.6 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subjec...

CVE-2009-4894

PunBB contains multiple XSS vulnerabilities in profile.php prior to version 1.3.4 that allow remote attackers to inject arbitrary scripts via the (1) password or (2) e-mail fields. Red Hat/NVD references confirm the same issue; remediation guidance in the sources is to upgrade to PunBB 1.3.4 or l...

SFCB vulnerabilities

= Product overview SBLIM SFCB is an Open Source implementation of a WBEM CIM broker. WBEM is a set of technologies aimed to monitor and administer larges pools of computing ressources, applications, hardware. It's used by computers management tools like HP Systems Insight Manager, VMware vSphere ...

CVE-2009-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 do, 2 id, and 3 uname parameters...

CVE-2009-4822

CVE-2009-4822 affects Kasseler CMS 1.3.4 via XSS in index.php, exploitable through parameters (do, id, uname). The NVD entry documents multiple XSS vulnerabilities that allow remote script/HTML injection; impact listed as Partial integrity with no confidentiality/availability impact, and no authe...