1406 matches found
Commercial Interactive Media SCOOP! 2.3 account_login.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Android FTPServer 1.9.0 - Remote DoS
No description provided by source. Exploit Title: Android FTPServer 1.9.0 Remote DoS Date: 03/20/12 Author: G13 Twitter: @g13net Software Site: https://sites.google.com/site/andreasliebigapps/ftpserver/ Download Link: http://www.g13net.com/ftpserver.apk Version: 1.9.0 Category: DoS android...
BannerFarm 2.3 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17613/info BannerFarm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
AuraCMS 2.3 - Multiple Vulnerabilities
No description provided by source...
Caldera OpenLinux 2.3 rpm_query CGI Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1036/info A vulnerability exists in the default installation of Caldera OpenLinux 2.3. A CGI is installed in /home/httpd/cgi-bin/ names rpmquery. Any user can run this CGI and obtain a listing of the packages, and version...
Android Kernel 2.6 - Local DoS Crash PoC
No description provided by source. Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be...
@cid Stats 2.3 Install.PHP3 Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...
ttCMS 2.2/2.3 Header.PHP Remote File Include Vulnerability
No description provided by source...
eyeos 2.3 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.eyeos.org/ Discovery...
openSUSE Security Update : rubygem-actionpack/activerecord-2_3 (openSUSE-SU-2012:0978-1)
3 Security issues were fixed in rails 2.3 core components. 2 NULL query issues where fixed in the actionpack gem. 1 SQL injection was fixed in the activerecord gem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
FineCMS 2.3.x 本地文件包含漏洞
简要描述： FineCMS2.3.x版本一文件中存在本地文件包含漏洞。需要在能截断的环境中使用。 详细说明： palyer/video.php player目录下的video.php 中存在本地文件包含漏洞（必须能支持截断的环境才能使用）。漏洞形成原因见 video.php 的98到100行代码。 $filename='./Models/'.$type.'Model.php'; iffileexists$filename includeonce$filename; 其中$type=$GET'vtype'; 漏洞证明： 在windows环境中测试的。...
DOYO 2.3 /message.php SQL注入漏洞
Doyo 2.3...
CVE-2014-3007
Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...
doyo 2.3 /template.php 本地文件包含漏洞
DOYO在template传参时，由于Template.php对传入文件路径的处理不当，逻辑错误，导致可包含任意文件（含相对路径）。 doyo 2.3...
OpenVPN 2.3.x Heartbeat Information Disclosure (Heartbleed)
According to its self-reported version number, the version of OpenVPN installed on the remote host is affected by an out-of-bounds read error, known as the 'Heartbleed Bug' in the included OpenSSL version. This error is related to handling TLS heartbeat extensions that could allow an attacker to...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by 1 providing a crafted playerId or 2 referencing a...
Ganib 2.3 SQL Injection
Exploit title: Ganib 2.x SQLi Date: 02/02/2014 Exploit author: drone @dronesec More information: http://hatriot.github.io/blog/2014/02/24/ganib-project-management-2.3-sqli/ Vendor homepage: http://www.ganib.com/ Software link:...
Google Analytics MU 2.3 Cross Site Request Forgery
Details ================ Software: Google Analytics MU Version: 2.3 Homepage: http://wordpress.org/plugins/google-analytics-mu/ CVSS: 5.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:N Description ================ CSRF in Google Analytics MU 2.3 Vulnerability ================ If an admin visits a page of the...
