806 matches found
PYSEC-2017-8
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digestsize...
PT-2023-2058
Name of the Vulnerable Software and Affected Versions phpipam versions prior to 1.5.2 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/edit-result.php script of the phpipam web application for IP address management...
PT-2023-16824 · Phpipam +1 · Phpipam +1
Name of the Vulnerable Software and Affected Versions: phpipam/phpipam versions prior to 1.5.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...
ourphp 1.5.2 /function/ourphp_shoppingorders.class.php 参数id 绕过过滤SQL注入漏洞
No description provided by source...
Unbound < 1.5.2 Upstream Server Trust Anchor Unspecified DNSSEC Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by an unspecified DNSSEC validation weakness that is triggered when an upstream server with different trust anchors introduces unsigned records in messages. C Tenable Network Security, Inc...
WordPress Welcart plugin SQL injection vulnerability (CNVD-2015-08468)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Welcart is one of the plug-ins used to create shopping sites. A SQL injection vulnerability exists in WordPress Welcart...
Easy Table <= 1.5.2 - Authenticated Cross-Site Scripting (XSS)
The Easy Table WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Elasticsearch Arbitrary File Disclosure Vulnerability
Elasticsearch is the Netherlands Elasticsearch company's set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . A security vulnerability exists in Elasticsearch versions prior to 1.5....
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the haproxy-1.5.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the CentOS operating system, which allows a malicious attacker to compromise the accessibility of protected information
The vulnerability of the haproxy-1.5.2 package for the CentOS operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the mit-krb5 package up to version 1.5.2-r1 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by ...
Apache Axis2 < 1.5.2 'engagingglobally' XSS Vulnerability
Apache Axis2 is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
WordPress Ecommerce Cart66 Lite Plugin - Blind SQL Injection
Because of this vulnerability in WordPress Ecommerce Cart66 Lite plugin , shortcodeProductsTable is accessible for every registered user. Solution Update to version 1.5.2...
WordPress Web Dorado Spider Video Player XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
PT-2014-8631
Name of the Vulnerable Software and Affected Versions: Web Dorado Spider Video Player plugin versions prior to 1.5.2 Description: The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via...
Geeklog <= 1.5.2 - savepreferences()/*blocks[] SQL Injection Exploit
No description provided by source. ?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php nea...
SweetCMS 1.5.2 'index.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31774/info SweetCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data,...
Chaton <= 1.5.2 - Local File Include Vulnerability
No description provided by source. + Chaton = 1.5.2 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: Donwload: http://easy-script.com/scripts-dl/chaton-1.5.2.zip + Greetz: opt!x hacker, xoron, cyberlog, mywisdom, irvian, EA ngel, bL4Ck3n91n3, xharu, zvtral, and all my friend ...
Geeklog <= 1.5.2 'usersettings.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34553/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
phpWebThings <= 1.5.2 MD5 Hash Retrieve/File Disclosure Exploit
No description provided by source. !/usr/bin/perl phpWebThings = 1.5.2 MD5 Hash Retrieve / File Disclosure Remote Exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://phpwebthings.nl ------------------------------ NOTE: 1. it works regardless of php.ini settings...