CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

Authentication flaw

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

CVE-2009-4927

WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...

CVE-2009-4927

CVE-2009-4927 affects WB News 2.1.2. An authentication bypass is possible by modifying the WBNEWS cookie (set to 1), allowing remote attackers to gain administrative access. The NVD entry and related records confirm a network-exposed vulnerability with a base CVSS v2 score of 7.5 (HIGH) and impac...

Article Management System 2.1.2 - Reinstall

======================================================================================== | Title : ArticleMS Article Management System 2.1.2 Reinstall Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by ArticleMS from ArticleTrader | Tested on: windows SP2...

Printoxx 2.1.2 Buffer Overflow

Exploit Title: Printoxx Local Buffer Overflow Date: 23 Dec, 2009 Author: sandman, n4mdn4s 4T gmail D0T com Software Link: http://kornelix.squarespace.com/printoxx/, http://kornelix.squarespace.com/storage/downloads/printoxx-2.1.2.tar.gz Version: ii+1 // -i imageDirectory strcpyimagedirk,argv++ii;...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

OSSIM 2.1 SQL Injection and xss

Exploit for unknown platform in category web applications =============================== OSSIM 2.1 SQL Injection and xss =============================== OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3...

dotProject Privilege Escalation Vulnerability

The host is installed with dotProject and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: gbdotprojectprivescalationvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ dotProject Privilege Escalation Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

aMule 'wxExecute()'任意命令执行漏洞

BUGTRAQ ID: 34683 CNCAN ID：CNCAN-2009042301 aMule是一款与eMule类似的电驴下载软件。 aMule不正确过滤部分字符，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 存在问题的代码src/DownloadListCtrl.cpp： command = wxT"xterm -T "aMule Preview" -iconic -e mplayer '$file'"; ... wxString rawFileName = file-GetFullName.GetRaw; command.ReplacewxT"$file",...

WB News 2.1.2 - Insecure Cookie Handling

WB News 2.1.2 - Insecure Cookie Handling ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.webmobo.com/downloads/ Software: wb news 2.1.2 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra...

WB News 2.1.2 - Insecure Cookie Handling

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.webmobo.com/downloads/ Software: wb news 2.1.2 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7 Aflawa Kamikaz Wa4rin Fi kol Bla4s...

CVE-2008-5890

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Injader 2.1.1 - SQL Injection HTML Injection

Injader 2.1.1 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/32843/info Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injecti...

smcFanControl 2.1.2 Multiple Buffer Overflow Vulnerabilities PoC (OSX)

No description provided by source. vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release...

smcFanControl 2.1.2 (OSX) - Multiple Buffer Overflow Vulnerabilities (PoC)

vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release smcFanControl 2.1.3 About smcFanControl...

CVE-2008-2236

Blosxom has a cross-site scripting (XSS) vulnerability (CVE-2008-2236) in blosxom.cgi before 2.1.2, exploitable via the flav parameter (flavour variable). Public sources consistently state that Blosxom

CVE-2008-2236

Cross-site scripting XSS vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter flavour variable. NOTE: some of these details are obtained from third party information...

Gentoo Security Advisory GLSA 200805-01 (horde)

The remote host is missing updates announced in advisory GLSA 200805-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the inactive parameter in a tasks action, 2 the date parameter in a calendar dayview action, 3 the callback parameter in a public calendar action,...