MODx Revolution 2.0.2-pl Local File Inclusion

------------------------------------------------------------------------ Software................MODx Revolution 2.0.2-pl Vulnerability...........Local File Inclusion Download................http://modxcms.com Release Date............9/28/2010 Tested On...............Windows Vista + XAMPP...

MODx 2.0.2-pl - '/manager/index.php?modahsh' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strin...

MODx manager - controllersdefaultresourcetvs.php?class_key Traversal Local File Inclusion

MODx manager - controllersdefaultresourcetvs.php?classkey Traversal Local File Inclusion source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...

Month Of Abysssec Undisclosed Bugs - Luftguitar CMS

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar CMS Vulnerability: Upload arbitrary...

Luftguitar CMS - Upload Arbitrary File

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-13-luftguitar-cms-vulnerability-upload-arbitrary-file/ ''' Abysssec Inc Public Advisory Title : Luftguitar CMS Vulnerability: Upload arbitrary...

Santafox 2.0.2 - search Cross-Site Scripting

Santafox 2.0.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43237/info Santafox is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

Sandbox 2.0.2 - Local File Inclusion

: Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: + PoC:http://localhost/index.php?a=../../../../../etc/passwd%00...

Sandbox 2.0.2 - Local File Inclusion

Sandbox 2.0.2 - Local File Inclusion : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: +...

Cisco DPC2100 2.0.2 r1256-060303 - Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/40346/info Cisco DPC2100 formerly Scientific Atlanta DPC2100 is prone to multiple security-bypass and cross-site request-forgery vulnerabilities. Successful exploits may allow attackers to run privileged commands on the affected device, change configurati...

Multiple Browsers - history.go() Denial of Service

Multiple Browsers - history.go Denial of Service DrIDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC function test window.onerror=new Function"history.go-1"; window.open'http://www.exploit-db.com'; test; test;...

CVE-2009-4687

CVE-2009-4687 documents a SQL injection in silentum_guestbook.php of Silentum Guestbook 2.0.2, allowing remote attackers to execute arbitrary SQL commands via the messageid parameter. The vulnerability affects the Silentum Guestbook component and is reflected in multiple records (e.g., NVD entry ...

GNU Mailman Unspecified Privilege Escalation Vulnerability (Jan 2010)

Mailman is prone to an unspecified privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DSA-1981-1 maildrop - privilege escalation

Bulletin has no description...

Mobile Chat 2.0.2 Cross Site Scripting

======================================================================================== | Title : Mobile Chat v2.0.2 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site :...

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Mobile Chat 2.0.2 - 'chatsmileys.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

WordPress 2.0.2-2.0.4 分页参数SQL注入漏洞

No description provided by source...

CVE-2009-3731

Multiple cross-site scripting XSS vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks...

Alt-N WebAdmin USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alt-N WebAdm...

PT-2009-5987 · Vmware · Vmware Esxi +1

Name of the Vulnerable Software and Affected Versions: VMware Server versions 1.x through 1.0.9 and 2.x through 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.3 and 3.5 Description: A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors...