408 matches found
TeamPass 2.1.5 - 'login' HTML Injection
source: https://www.securityfocus.com/bid/53038/info TeamPass is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...
Apache MyFaces - 'ln' Information Disclosure
source: https://www.securityfocus.com/bid/51939/info Apache MyFaces is prone to a remote information-disclosure vulnerability. Remote attackers can exploit this issue to obtain sensitive information that may aid in further attacks. The following versions are affected: Apache MyFaces 2.0.1 through...
WordPress Plugin BackWPUp 2.1.4 - Code Execution
WordPress Plugin BackWPUp 2.1.4 - Code Execution Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote...
CVE-2011-3790
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
Information disclosure
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
CVE-2011-3790
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
CVE-2011-3790
CVE-2011-3790 affects Piwigo 2.1.5. The vulnerability allows remote attackers to disclose the installation path by requesting a PHP file (e.g., tools/metadata.php) and triggering an error message. Documents consistently describe information disclosure as the impact; no specific exploit details or...
CVE-2011-3790
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
dotProject 'index.php' SQL Injection Vulnerability
The host is running dotProject and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject 'index.php' SQL Injection Vulnerability. Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...
dotProject 2.1.5 - SQL Injection
Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability Google Dork: intitle:"dotproject" Date: 2011-12-09 Author: sherl0ck @AlligatorTeam Software Link: http://www.dotproject.net/ Version: 2.1.5 tested Tested on: Debian GNU/Linux 5.0 --------------- PoC --------------- URL:...
dotProject 2.1.5 SQL Injection
Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability Google Dork: intitle:"dotproject" Date: 2011-12-09 Author: sherl0ck @AlligatorTeam Software Link: http://www.dotproject.net/ Version: 2.1.5 tested Tested on: Debian GNU/Linux 5.0 --------------- PoC --------------- URL:...
dotProject 2.1.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability Google Dork: intitle:"dotproject" Date: 2011-12-09 Author: sherl0ck @AlligatorTeam Software Link: http://www.dotproject.net/ Version: 2.1.5 tested Tested on: Debian GNU/Linux 5.0...
dotProject 2.1.5 - Multiple Vulnerabilities
dotProject 2.1.5 - Multiple Vulnerabilities exploit title: sql injection in dotproject 2.1.5 date 21.o2.2o11 author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : http://dotproject.net/ PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2...
Dotproject 2.1.5 SQL Injection / Cross Site Scripting
exploit title: sql injection in dotproject 2.1.5 date 21.o2.2o11 author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : http://dotproject.net/ PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2 ./dotproject/fileviewer.php: 127...
dotproject 2.1.5 Xss / Sql Injection Vulnerabilities
Exploit for php platform in category web applications author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2 ./dotproject/fileviewer.php:127 dbloadHash'SELECT FROM dotpfiles WHERE fileid ...
dotProject 2.1.5 - Multiple Vulnerabilities
exploit title: sql injection in dotproject 2.1.5 date 21.o2.2o11 author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : http://dotproject.net/ PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2 ./dotproject/fileviewer.php: 127...
dotProject 2.1.5 CSRF Vulnerability
Exploit for php platform in category web applications input type="hid...
dotProject 2.1.5 - Cross-Site Request Forgery
dotProject 2.1.5 - Cross-Site Request Forgery Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt input type="hidden" name="use...