905 matches found
CVE-2015-4726
PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...
CVE-2015-4725
AudioShare 2.0.2 is affected by a Cross-site Scripting (XSS) in forgot.php, exploitable via the email parameter. The vulnerability allows remote attackers to inject arbitrary script/HTML when user-provided data is rendered, enabling potential session hijacking or information disclosure as describ...
Design/Logic Flaw
lib/parseini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the configuration file in the extra-opts flag. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4701...
CVE-2014-4703
lib/parseini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the configuration file in the extra-opts flag. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4701...
WordPress Mobile Pack Plugin Information Disclosure Vulnerability
WordPress Mobile Pack Plugin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress 2.0.2 - 2.0.4 Paged Parameter SQL Injection
...
Wordpress 1.5.1 - 2.0.2 wp-register.php Multiple Parameter XSS
...
WebAdmin <= 2.0.4 USER Buffer Overflow Exploit
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
phpBB Knowledge Base 2.0.2 Mod KB_constants.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17763/info Knowledge Base Mod for phpbb is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...
Advanced Poll 2.0.2 Common.Inc.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file...
Rediff Bol 2.0.2 URL Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6670/info It has been reported that a problem in Rediff Bol may allow remote users to log other users out of the Bol chat client. Due to improper handling of some types of requests, a remote user could send an URL request...
Zabbix 2.0.1 and Earlier Session Extractor 0day
No description provided by source. !/usr/bin/python import re import sys,urllib2,urllib print \n Zabbix 2.0.1 Session Extractor 0day print http://www.offensive-security.com print \n ''' The sessions found by this tool may allow you to access the scripts.php file. Through this web interface, an...
digiSHOP 2.0.2 - SQL Injection Vulnerability
No description provided by source. ----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site :...
Bitweaver <= 2.6 saveFeed() Remote Code Execution Exploit
No description provided by source. ?php / Bitweaver = 2.6 /boards/boardsrss.php / saveFeed remote code execution exploit by Nine:Situations:Group::bookoo php.ini independent site: http://retrogod.altervista.org/ software site: http://www.bitweaver.org/ You need an user account and you need to...
history.go() DoS on multiple browsers
No description provided by source. -- Camino 2.0.2 history.go DoS Found By: DrIDE Tested On: Camino 2.0.2 on OSX 10.6.3 Notes: Impact is reduced because user must either have popup blocker off, or accept popups. Tested On: Safari 4.0.5 on OSX 10.6.3 Notes: Impact is reduced because user must eith...
Application Enhancer (APE) 2.0.2 - Local Privilege Escalation Exploit
No description provided by source. !/usr/bin/ruby Exploit Of The Apes: A practical pwnage for Application UNEnhancer aka APU c 2006 LMH lmh at info-pull.com and Johnny Pwnerseed. This goes dedicated to macdev. For the childish flaming and great brain lag. Lesson: Don't talk about stuff you have N...
Pi3Web 2.0.2 SortName Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7787/info Pi3Web is prone to a buffer overflow vulnerability. This is due to insufficient bounds checking of URI parameters. This could be exploited to cause a denial of service or possibly to execute malicious...
Richard Gooch SimpleInit 2.0.2 Open File Descriptor Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5001/info A vulnerability has been reported for simpleinit that may allow users to execute arbitrary commands as the superuser. The vulnerability occurs because simpleinit may allow some child processes to inherit a file...
ProQuiz 2.0.2 - CSRF Vulnerability
No description provided by source. Exploit Title: ProQuiz v2.0.2 CSRF Vulnerability Author: DaOne Date: 19/8/2012 Software Link: http://code.google.com/p/proquiz/downloads/list CSRF Change Admin Password /form html body onload=document.form0.submit; form method=POST name=form0...
CVE-2014-3866
Multiple cross-site request forgery CSRF vulnerabilities in usersettings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the 1 administrative password via the passwordc parameter or 2 administrative e-mail address vi...