Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities

Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/54985/info Total Shop UK eCommerce CodeIgniter is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

CodeIgniter 2.1 - 'xss_clean()' Filter Security Bypass

source: https://www.securityfocus.com/bid/54620/info CodeIgniter is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass XSS filter protections and perform cross-site scripting attacks. CodeIgniter versions prior to 2.1.2 are vulnerable. Build an application on...

CVE-2011-4303

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registrationhubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature...

Design/Logic Flaw

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registrationhubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature...

PyroCMS 2.1.1 CRLF Injection / Stored Cross Site Scripting

Exploit for php platform in category web applications PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC...

Chyrp 2.1.2 - includeserror.php?body Cross-Site Scripting

Chyrp 2.1.2 - includeserror.php?body Cross-Site Scripting source: https://www.securityfocus.com/bid/52117/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affect...

Chyrp 2.1.2 - '/includes/error.php?body' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52117/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal...

CVE-2010-4940

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4940

The CVE-2010-4940 entry concerns WAnewsletter 2.1.2, where a flaw in the script index.php enables SQL injection through the id parameter. This allows remote attackers to construct and execute arbitrary SQL commands, with potential partial confidentiality, integrity, and availability impacts as in...

CVE-2010-4940

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-3808

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...

Symphony CMS 2.1.2 Blind SQL Injection

Exploit for php platform in category web applications Symphony is a web-based content management system CMS that enables users to create and manage websites and web applications of all shapes and sizes?from the simplest of blogs to bustling news sites and feature-packed social networks. Taken fro...

Symphony CMS 2.1.2 - Blind SQL Injection

Symphony CMS 2.1.2 - Blind SQL Injection -------------------------------------------------------------------------------------------- 20110424 - Justanotherhacker.com : Symphony-cms blind sql injection JAHx111 - http://www.justanotherhacker.com/advisories/JAHx111.txt...

Fedora 12 : pootle-2.1.2-1.fc12 (2010-16990)

Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...

TinyMCE MCFileManager 2.1.2 Arbitrary arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

TinyMCE MCFileManager 2.1.2 Arbitrary upload page, not the file name filtering leads to arbitrary file vulnerability google: inurl: /tinymce/plugins/filemanager/ Enter the upload page : http://www. myhack58. com/tinymce/plugins/filemanager/ Upload shell:...

WAnewsletter 2.1.2 SQL Injection

================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author: [email protected] Software...

piwigo 2.1.2 Multiple vulnerabilities

Exploit for php platform in category web applications ===================================== piwigo 2.1.2 Multiple vulnerabilities ===================================== --=Sql injection=--...

piwigo-2.1.2 - Multiple Vulnerabilities

--=Sql injection=-- http://www.target.com/path/[email protected]&author=sweet&cat=1SQLi&since=1&sortby=date&sortorder=DESC&itemsnumber=5 http://www.target.com/path/picture.php?1sweetSQLi&action=rate=0 http://www.target.com/path/index.php?/search/10SQli --=Stored Xss=-- Admi...

Joomla! Component FreiChat 1.0/2.x - HTML Injection

source: https://www.securityfocus.com/bid/41961/info Joomla! FreiChat component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script...