JShop 1.x 2.x - xPage Local File Inclusion

JShop 1.x 2.x - xPage Local File Inclusion JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "power...

CVE-2008-1218

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skippasswordcheck field t...

MyBlog 1.x - 'Games.php?ID' Remote File Inclusion

source: https://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

xeCMS 1.x (view.php list) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== xeCMS 1.x view.php list Remote File Disclosure Vulnerability ==============================================================...

HP-UX Security Patch : PHSS_35558

Virtualvault 4.7 Apache 1.x OWS update %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26873; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_33666

Webproxy 2.1 Apache 1.x 304 response fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26813; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_35109

Virtualvault 4.7 Apache 1.x OWS update %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26855; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_33074

Webproxy 2.1 Apache 1.x process size fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26791; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting

Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in...

Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting

Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the...

Claroline 1.x - '/admin/campusProblem.php?view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

Blog System 1.x - index.php?news_id SQL Injection

Blog System 1.x - index.php?newsid SQL Injection --==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...

Blog System 1.x - 'index.php?news_id' SQL Injection

--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...

Blog System 1.x (index.php news_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Blog System 1.x index.php newsid Remote SQL Injection Vulnerability ======================================================================...

Directory traversal

Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. dot dot in the name parameter...

vbzoom 1.x (forum.php MainID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ vbzoom 1.x forum.php MainID Remote SQL Injection Vulnerability ================================================================ --/ Long Life Palestine -- HHHHHH HHHHHH HH...

vbzoom 1.x - forum.php?MainID SQL Injection

vbzoom 1.x - forum.php?MainID SQL Injection --/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH ...