CVE-2009-4303

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores 1 password hashes and 2 unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information...

CVE-2009-4297

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Design/Logic Flaw

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

Design/Logic Flaw

The LAMS module mod/lams for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the 1 username, 2 firstname, and 3 lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors...

CVE-2009-4302

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...

CVE-2009-4297

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

iSupport <= 1.8 XSS/LFI Exploit

Exploit for unknown platform in category web applications =============================== iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

iSupport 1.8 - ticket_function.php Multiple Cross-Site Scripting Vulnerabilities

iSupport 1.8 - ticketfunction.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker m...

iSupport 1.8 - Cross-Site Scripting Local File Inclusion

iSupport 1.8 - Cross-Site Scripting Local File Inclusion --------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

iSupport 1.8 XSS / Local File Inclusion

--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

iSupport 1.8 - Cross-Site Scripting / Local File Inclusion

--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...

Zabbix Server - Multiple Vulnerabilities

Zabbix Server : Multiple remote vulnerabilities From: Nicob Date: Sun, 13 Dec 2009 16:28:35 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other network hardware." Zabbix Server :...

Zabbix Server Multiple remote vulnerabilities

Exploit for unknown platform in category web applications ============================================= Zabbix Server Multiple remote vulnerabilities ============================================= Zabbix Server : Multiple remote vulnerabilities From: Nicob Date: Sun, 13 Dec 2009 16:28:35 +0100 Fro...

CVE-2009-3668

CVE-2009-3668 describes a cross-site scripting (XSS) vulnerability in Ardguest 1.8, specifically in the file ardguest.php where the page parameter可 allows remote attackers to inject arbitrary web script or HTML. The condition is input reflected to the user, enabling script execution in the victim...

Joomla GroupJive 1.8 B4 Remote File Inclusion

Joomla Component groupjive 1.8 B4 RFI Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.groupjive.org/ Scripts : http://forge.joomlapolis.com/projects/listfiles/groupjive File :...

Joomla GroupJive 1.8 B4 Remote File Inclusion

Exploit for unknown platform in category web applications ============================================= Joomla GroupJive 1.8 B4 Remote File Inclusion ============================================= Joomla Component groupjive 1.8 B4 RFI Vulnerability Author : M3NW5 Location : INDONESIA Achievo 1.3.4...

Ardguest 1.8 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Ardguest 1.8 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.promosi-web.com/script/guestbook/ Greetings :...

Mandrake Security Advisory MDVSA-2009:193 (ruby)

The remote host is missing an update to ruby announced via advisory MDVSA-2009:193. OpenVAS Vulnerability Test $Id: mdksa2009193.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:193 ruby Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Unrestricted file upload

Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension during a regnew action, then accessing it via a direct request to the file in photoes/...