PHPDug 2.0.0 - Cross-Site Scripting

======================================================================================== | Title : PHPDug version 2.0.0 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:321)

Security vulnerabilities has been identified and fixed in pidgin : The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service. CVE-2008-3532 Pidgin 2.4....

Code injection

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

PT-2009-5272 · Pixaria · Pixaria Gallery

Name of the Vulnerable Software and Affected Versions: Pixaria Gallery versions 2.0.0 through 2.3.5 Description: The issue allows remote attackers to read arbitrary files via a base64-encoded file parameter in the pixaria.image.php file. Recommendations: For Pixaria Gallery versions 2.0.0 through...

CVE-2008-6700

CVE-2008-6700 describes multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) mytable to view.php, (2) mytable to viewdb2.php, (3) tablehere to category-rename.php, and...

Session fixation

Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page...

CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability

No description provided by source. CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerability Provider: www.cs-cart.com Discovered by netsoul Greetz: m1cr0n, IvanKalet, blackfalcon, str0ke Contact: netsoul2atgmail.com ALTO PARANA - PARAGUAY Ñane mba'e teete Exploit: http://cs-cart...

CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= CS-Cart 2.0.0 Beta 3 productid SQL Injection Vulnerability ============================================================= CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerabilit...

CS-Cart 2.0.0 Beta 3 - Product_ID SQL Injection

CS-Cart 2.0.0 Beta 3 - ProductID SQL Injection CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerability Provider: www.cs-cart.com Discovered by netsoul Greetz: m1cr0n, IvanKalet, blackfalcon, str0ke Contact: netsoul2atgmail.com ALTO PARANA - PARAGUAY Ñane mba'e teete Exploit: http://cs-cart...

CS-Cart 2.0.0 Beta 3 SQL Injection

CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerability Provider: www.cs-cart.com Discovered by julioisaias Greetz: m1cr0n, IvanKalet, blackfalcon Contact: julioisaiasatgmail.com ALTO PARANA - PARAGUAY Ñane mba'e teete Exploit: http://cs-cart...

eXtplorer include/init.php本地文件包含漏洞

eXtplorer include/init.php本地文件包含漏洞 发布日期：2009-03-02 更新日期：2009-03-03 受影响系统： Soeren Eberhardt eXtplorer 2.0.0 不受影响系统： Soeren Eberhardt eXtplorer 2.0.1 描述：BUGTRAQ ID: 33955 eXtplorer是一款基于web的文件管理组件。...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6378

This CVE (CVE-2008-6378) affects Calendar Mx Professional 2.0.0 and arises from a SQL injection in calendar_Eventupdate.asp where the ID parameter is not properly sanitized. Remote attackers can execute arbitrary SQL commands via that parameter. The vulnerability is rated CVSSv2 base score 7.5 (H...

CVE-2008-6379

CVE-2008-6379 is a SQL injection vulnerability in Gallery MX 2.0.0, affecting the pics_pre.asp endpoint and allowing remote attackers to execute arbitrary SQL commands via the ID parameter. The issue is documented in multiple sources (NVD, CVE lists) with a CVSS v2 base score of 7.5 (High) and ne...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6328

Butterfly Organizer is affected by CVE-2008-6328: an SQL injection in view.php via the id parameter could allow remote execution of arbitrary SQL commands. Affected versions include 2.0.0 and 2.0.1. OpenVAS details also describe additional input-sanitization vulnerabilities (XSS) in the same prod...

Parsi PHP CMS 2.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/33914/info Parsi PHP CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

XWork 2.0.11.2 - ParameterInterceptor Class OGNL Security Bypass

XWork 2.0.11.2 - ParameterInterceptor Class OGNL Security Bypass source: https://www.securityfocus.com/bid/32101/info XWork is prone to a security-bypass vulnerability because it fails to adequately handle user-supplied input. Attackers can exploit this issue to manipulate server-side context...

xbtit-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z -beenu- DON -OutLawz- P47tr1ck- FeDeReR- MAGE- JeTFyrE-FunctionSys-jappan and all...

barcodegen 2.0.0 - 'class_dir' Remote File Inclusion

Name : barcodegen = 2.0.0 Remote File Inclusion Vulnerability Download From : http://www.barcodephp.com/processdownload.php?id=barcodegen.1d-php4.v2.0.0.zip Found By : Br0k3n H34rT Home Page : WwW.Sec-Code.CoM ============================================================================ Vulne Code...