1497 matches found
CVE-2011-1311
The Security component in IBM WebSphere Application Server WAS before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated...
Design/Logic Flaw
The Security component in IBM WebSphere Application Server WAS before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated...
CVE-2011-1311
The Security component in IBM WebSphere Application Server WAS before 7.0.0.15, when a J2EE 1.4 application is used, determines the security role mapping on the basis of the ibm-application-bnd.xml file instead of the intended ibm-application-bnd.xmi file, which might allow remote authenticated...
PT-2011-2901 · Wireshark · Wireshark
Name of the Vulnerable Software and Affected Versions: Wireshark versions 1.2.x through 1.2.15 Wireshark versions 1.4.x through 1.4.4 Description: The issue is related to a stack consumption vulnerability in the dissect ber choice function within the BER dissector. This vulnerability might allow...
News Events 1.4 SQL Injection
Exploit Title : Content Management newsevents 1.4 Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 15-02-2011 HomePage : www.indishell.in Dork : action=newsevents&newsid= Version : 1.4 Tested on : Eduys Vulnerability Style : Content Management newsevents...
Wireshark < 1.2.14 / 1.4.3 Multiple Vulnerabilities
The installed version of Wireshark is 1.2.x less than 1.2.14 or 1.4.x less than 1.4.3. Such versions are affected by the following vulnerabilities : - An error exists in the MAC-LTE dissector that allows a series of malformed packets to cause a buffer overflow. 5530 - An error exists in the ENTTE...
SQL Injection in phpMySport
Vulnerability ID: HTB22770 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...
SQL Injection in phpMySport
Vulnerability ID: HTB22771 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport1.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...
CVE-2010-1323
MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...
SquirrelMail Virtual Keyboard 0.9.1 Cross Site Scripting
Hi, Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is vulnerable to cross site scripting XSS. The vkeyboard.php script fails to sanitize the value of HTTP GET parameter 'passformname' which the script stores in a variable of the same name and outputs unmodified into a HTML documen...
CVE-2009-4985
SQL injection vulnerability in browse.php in Accessories Me PHP Affiliate Script 1.4 allows remote attackers to execute arbitrary SQL commands via the Go parameter...
CVE-2009-4984
CVE-2009-4984 affects Accessories Me PHP Affiliate Script 1.4. The vulnerability is described as multiple cross-site scripting (XSS) in which attackers can inject arbitrary web script or HTML via the Keywords parameter to search.php and the SearchIndex parameter to browse.php. The connected recor...
CVE-2009-4985
CVE-2009-4985 describes an SQL injection in browse.php of Accessories Me PHP Affiliate Script 1.4, allowing remote attackers to execute arbitrary SQL via the Go parameter. Affected component is the browser page handling the Go input in the script. The underlying cause is improper input handling l...
ChordPulse 1.4 Denial Of Service
Vendor: http://www.chordpulse.com/ .-----.--.--.--.----.----.-.---| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Title : ChordPulse Gr33tz : His0k4 , Bibi-info , volc4n0 my $file="madjix.cps"; my $dz="\x41" x 5000 ; openMYFILE,'MadjiX.cps'; print MYFILE $dz; closeMYFILE;...
Globber 1.4 Cross Site Request Forgery
alert0" /...
Joomla! Component jesubmit 1.4 - SQL Injection
Joomla! Component jesubmit 1.4 - SQL Injection Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team...
BtiTracker 1.3.x / 1.4.x SQL Injection
!/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ // www.insecurity.ro // BtiTracker...
BtiTracker 1.3.x < 1.4.x - SQL Injection
!/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ // www.insecurity.ro // BtiTracker...
Default credentials
The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...