206 matches found
CVE-2016-3012
IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...
Design/Logic Flaw
IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...
WordPress 404 To 301 2.2.8 Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin ------------------------------------------------------------------------ Alyssa Milburn , July 2016...
WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting
WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting Source: https://sumofpwn.nl/advisory/2016/storedcrosssitescriptingvulnerabilityin404to301wordpressplugin.html Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin Abstract A stored Cross-Site Scripting...
Joomla Extra Search 2.2.8 SQL Injection
Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...
CVE-2015-2217
Ultimate PHP Board (UPB, also known as myUPB) is affected by multiple XSS vulnerabilities. The CVE-2015-2217 entry describes remote XSS via the q parameter in search.php or the avatar parameter in profile.php, with impact described as injection of arbitrary web script/HTML. Public sources within ...
Zabbix Multiple SQLi Vulnerabilities (Jan 2015)
Zabbix is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
[SECURITY] Fedora 20 Update: webkitgtk3-2.2.8-2.fc20
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
AContent 1.3 - Local File Inclusion
No description provided by source. Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on:...
Samba 2.2.x 'call_trans2open' Remote Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7294/info A buffer overflow vulnerability has been reported for Samba. The problem occurs when copying user-supplied data into a static buffer. By passing excessive data to an affected Samba server, it may be possible for...
Samba trans2open Overflow (Mac OS X PPC)
No description provided by source. $Id: trans2open.rb 9571 2010-06-21 16:53:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DLA-0009-1 lxml - security update
Bulletin has no description...
CakePHP AssetDispatcher Local File Inclusion Vulnerability
CVE Number: N/A not assigned Title: CakePHP AssetDispatcher Local File Inclusion Vulnerability Affected Software: Confirmed on CakePHP v2.3.7, v2.2.8 prior versions may also be affected Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.8 & 2.2.9 was released which...
CakePHP 2.2.82.3.7 - AssetDispatcher Class Local File Inclusion
CakePHP 2.2.82.3.7 - AssetDispatcher Class Local File Inclusion source: https://www.securityfocus.com/bid/61746/info CakePHP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files or...
AContent 1.3 Local File Inclusion
Exploit for php platform in category web applications Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category:...
AContent 1.3 Local File Inclusion
Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on: Apache/2.2.8Win32 PHP/5.2.6 Exploit...
Slash CMS - Multiple Vulnerabilities
Exploit Title: Slash CMS Multiple Vulnerabilities Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.slash-cms.com/ Software Link: http://sourceforge.net/projects/slashcms/ Category: webapps/php Google Dork: "N/A" Tested on: Apache/2.2.8Win32 PHP/5.2.6 File Upload: Upload...
b2ePMS 1.0 SQL Injection
Title: b2ePMS 1.0 multiple SQLi Vulnerabilities Version: 1.0 Author/Found by: loneferret Manifacturer/Software link: https://developer.berlios.de/projects/b2epms/ Other vulnerability: http://www.exploit-db.com/exploits/18882/ Date found: May 27th 2012 Tested on: Ubuntu Server 8.04 / PHP Version...
b2ePMS 1.0 multiple SQLi Vulnerabilities
Exploit for php platform in category web applications Title: b2ePMS 1.0 multiple SQLi Vulnerabilities Version: 1.0 Author/Found by: loneferret Manifacturer/Software link: https://developer.berlios.de/projects/b2epms/ Other vulnerability: http://www.exploit-db.com/exploits/18882/ Date found: May...
b2ePms 1.0 - Multiple SQL Injection Vulnerabilities
Title: b2ePMS 1.0 multiple SQLi Vulnerabilities Version: 1.0 Author/Found by: loneferret Manifacturer/Software link: https://developer.berlios.de/projects/b2epms/ Other vulnerability: http://www.exploit-db.com/exploits/18882/ Date found: May 27th 2012 Tested on: Ubuntu Server 8.04 / PHP Version...