Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/47784/info Apache Struts is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Successful exploitation requires 'Dynamic Method Invocation' to be enabled by default. An attacker may leverage this...

Exponent 2.0.0 Beta 1.1 Shell Upload

------------------------------------------------------------------------ Software................Exponent 2.0.0 beta 1.1 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.exponentcms.org/ Discovery Date..........5/4/2011 Tested...

Greenbone Security Assistant < 2.0.0 CSRF Vulnerability

Greenbone Security Assistant is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHPDug 2.0.0 Cross Site Scripting

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

TIBCO Security Advisory: March 15, 2011 - TIBCOtibbr

TIBCO tibbr vulnerability Original release date: March 15, 2011 Last revised: -- CVE-2011-1414 Source: TIBCO SoftwareInc. TIBCO tibbr vulnerability Original release date: March 15, 2011 Last revised: -- Source: TIBCO Software Inc. Systems Affected tibbr versions below 2.0.0 The following componen...

A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH)

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the app, drag the crafted .wav file, cal...

A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP3 French Date: 17/01/2011 Author: h1ch4m Email: email protected...

Authentication flaw

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users...

Apache Struts Security Update (S2-005) - Version Check

Apache Struts is prone to a remote command execution RCE vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2010-1870

The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "" protection mechanis...

Apache JackRabbit 2.0.0 - webapp XPath Injection

Apache JackRabbit 2.0.0 - webapp XPath Injection Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip...

Social Media - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in...

CVE-2010-2618

CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...

CVE-2009-4891

CS-Cart 2.0.0 Beta 3 is affected by an SQL injection in index.php via the product_id parameter in the products.view action. The vulnerability allows remote attackers to execute arbitrary SQL commands on the backend. The issue is documented across multiple sources (e.g., Exploit-DB exploit 8184 an...

xBtiTracker Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== xBtiTracker Remote SQL Injection Vulnerability ============================================== Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam...

xBtiTracker - SQL Injection

xBtiTracker - SQL Injection Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam http://inattack.ru/ via Dominus Software Link: http://www.btiteam.org/ Version: xbtit v.2.0.0 - revision 559 and older Tested on: xbtit v.2.0.0 - revision 559 Code :...

xBtiTracker - SQL Injection

Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam http://inattack.ru/ via Dominus Software Link: http://www.btiteam.org/ Version: xbtit v.2.0.0 - revision 559 and older Tested on: xbtit v.2.0.0 - revision 559 Code :...

PHPDug 2.0.0 Cross Site Scripting / Denial Of Service

======================================================================================== | Title : PHPDug version 2.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts...

PHPDug version 2.0.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================= PHPDug version 2.0.0 Cross Site Scripting Vulnerability =======================================================...

PHPDug 2.0.0 - Cross-Site Scripting

PHPDug 2.0.0 - Cross-Site Scripting ======================================================================================== | Title : PHPDug version 2.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...