CVE-2015-1191

Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

CVE-2014-5451

CVE-2014-5451 is a reflected XSS in MODX Revolution prior to or equal to 2.3.1-pl, caused by insufficient sanitization of input data passed via the HTTP GET parameter a to the path /manager/. The issue affects MODX Revolution v2.3.1-pl and earlier; exploitation can trick an admin to click a craft...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:jPORTAL 2 & inurl:articles.php?topic= Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function topicname$...

Green Desktiny - Customer Support Helpdesk 2.3.1 - SQL Injection Vulnerability

No description provided by source. Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - +...

Matt Wright Guestbook 2.3.1 Guestbook.PL Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17438/info Guestbook is prone to multiple HTML-injection vulnerabilities; the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit

No description provided by source. ?php jPORTAL 2.3.1 & UserPatch forum.php Remote PHP Code Execution Exploit author: irk4zatyahoo.pl http://irk4z.wordpress.com dorks: powered by jPORTAL 2 & UserPatch powered by jPORTAL 2 greetz: str0ke, wacky, polish under :...

PsychoStats <= 2.3.3 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Viva IslaM Viva IslaM rEm0te SQL InjEction VulnErability PsychoStats Versions - v2.3 - v2.3.1 - v2.3.3 - map.php id & weapon.php id AuTh0r : Mr.SQL -:: ThE Geek InjEcT0r ::- H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Script Name : PsychoStats Versions - v2...

phpBB Module XS-Mod 2.3.1 - Local File Inclusion Vulnerability

No description provided by source. ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

osCommerce 2.3.1 (banner_manager.php) Remote File Upload Vulnerability

No description provided by source. Exploit Title: OSC 2.3.1: Remote File Upload Vulnerability : Banner Manager Google Dork: powered by oscommerce we will automatically add these to the GHDB Date: 13-05-2011 Author: Number 7 Software Link: http://www.oscommerce.com/ext/oscommerce-2.3.1.zip Version...

WordPress Post To PDF 2.3.1 Cross Site Scripting

============================================================== Title ...| XSS in WP Post to PDF Version .| wp-post-to-pdf.2.3.1 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/ ==============================================================...

WordPress Category Grid View Gallery XSS Vulnerability

Category Grid View Gallery plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symphony - sort SQL Injection

Symphony - sort SQL Injection source: https://www.securityfocus.com/bid/58843/info Symphony is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Struts 2.3.1 DebuggingInterceptor 命令执行漏洞

No description provided by source...

PT-2012-2885 · Red Hat · Resteasy

Name of the Vulnerable Software and Affected Versions: RESTEasy versions prior to 2.3.1 Description: The issue allows remote attackers to read arbitrary files via an external entity reference in a DOM document, specifically through an XML external entity XXE injection attack. Recommendations: For...

CVE-2011-5221

Cross-site scripting XSS vulnerability in the getLog function in svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to 1 comp.php, 2 diff.php, or 3 revision.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2012-2658

Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service crash via a long string in the DRIVER option. NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already has...

Buffer overflow

DISPUTED Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service crash via a long string in the DRIVER option. NOTE: this issue might not be a vulnerability, since the ability to set this option typically implies that the attacker already...

RESTEasy: XML eXternal Entity (XXE) flaw

RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity XXE injection attack...

CVE-2012-3396

Cross-site scripting XSS vulnerability in cohort/editform.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the idnumber field. NOTE: this vulnerability exists...