Joomla ActiveHelper LiveHelp 2.0.3 Cross Site Scripting

Exploit Title: Joomla Component ActiveHelper LiveHelp XSS Vulnerabilities Date: 18.05.2010 Author: Valentin Category: webapps/0day Version: 2.0.3 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...

Joomla Component com_activehelper_livehelp XSS Vulnerabilities

Exploit for php platform in category web applications ============================================================== Joomla Component comactivehelperlivehelp XSS Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...

Mozilla incorrectly frees used memory (MFSA 2010-03)

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...

openSUSE Security Update : seamonkey (seamonkey-2013)

Mozilla SeaMonkey was upgraded to version 2.0.3, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products...

SeaMonkey < 2.0.3 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.3. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-01 - The implementation of 'Web Workers' contained an error in its handling of array data types...

Bo-Blog 2.0.3 whizzylink.php 文件信息泄露漏洞

No description provided by source...

Alt-N WebAdmin USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alt-N WebAdm...

Sql injection

SQL injection vulnerability in memberssearch.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field...

CVE-2008-7114

SQL injection vulnerability in memberssearch.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field...

CVE-2008-7114

SQL injection vulnerability in memberssearch.php in iFusion Services iFdate 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the name field...

CVE-2008-7114

CVE-2008-7114 affects iFusion Services iFdate 2.0.3 and earlier. The issue is an SQL injection in members_search.php where the name field can be exploited to execute arbitrary SQL commands. The impact is remote execution of SQL commands with partial confidentiality/integrity/availability impact a...

Directory traversal

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

Directory traversal

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

CVE-2008-7054

Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the 1 gsLanguage and 2 languagehome parameters to modules/diary/showdiary.php; 3 adminhome, 4 gsLanguage, and 5 languagehome parameters to...

CVE-2008-7055

CVE-2008-7055 affects ezContents 2.0.3: module.php allows remote attackers to bypass directory traversal protections and include/execute arbitrary local files via "....//" sequences in the link parameter. The flaw arises from improper filtering by str_replace. Evidence from NVD/NVD-linked entries...

CVE-2008-7054

Technical details about CVE-2008-7054 are not publicly provided in the connected documents. The entries reiterate the vulnerability description without product/version specifics. Monitor for updates from official advisories to obtain concrete impact, affected components, and fixes.

PT-2009-5283 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 2.0.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the items number parameter in the comments.php file. Recommendations: For versions prior to 2.0.3, update to...

Server side request forgery (ssrf)

Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service crash or hang and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an...

Bo-Blog 2.0.3 background plug horse execute arbitrary commands vulnerability-vulnerability warning-the black bar safety net

| Article source: &&www.slenk.net Article author: lone water around the city Today analyzed under the Bo-Blog 2.0.3 of the code, The event is by this version of the Flyh4t big cow release of a known injection vulnerability. Into the backend crunching for half a day, and looked under the code,...

Fedora 10 : Miro-2.0.3-2.fc10 / blam-1.8.5-8.fc10 / devhelp-0.22-6.fc10 / epiphany-2.24.3-4.fc10 / etc (2009-3100)

A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. CVE-2009-1169 A flaw was discovered in the way Firefox handles...