370 matches found
WordPress Plugin RB Agency 2.4.7 - Local File Disclosure
WordPress Plugin RB Agency 2.4.7 - Local File Disclosure Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is...
Dokeos 2.2.1 - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip...
Apache 2.4.7 + PHP 7.0.2 - openssl_seal() Uninitialized Memory Code Execution
Apache 2.4.7 + PHP 7.0.2 - opensslseal Uninitialized Memory Code Execution ?php // Source: http://akat1.pl/?id=1 function getmaps $fh = fopen"/proc/self/maps", "r"; $maps = fread$fh, 331337; fclose$fh; return explode"\n", $maps; function findmap$sym $addr = 0; foreachgetmaps as $record if...
Fedora 22 : php-ZendFramework2-2.4.7-1.fc22 / php-guzzle-Guzzle-3.9.3-5.fc22 (2015-13529)
Zend Framework Upstream ChangeLogs: Version 2.4.7 Version 2.4.6 Version 2.4.5 Version 2.4.4 Version 2.4.3 Version 2.4.2 Version 2.4.1 Version 2.4.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fiyo CMS 2.0_1.9.1 SQL Injection
Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-393...
GeniXCMS 0.0.3 - register.php SQL Injection Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version:...
Apache HTTP Server 'mod_cache' Denial of Service Vulnerability (May 2015)
Apache HTTP Server is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the iproute-2.4.7 package in the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out locally...
Bacula-Web 5.2.10 (joblogs.php, jobid param) - SQL Injection
谷歌搜索：joblogs.php?jobid= 案例：http://cep.treslagoas.ms.gov.br/backup/joblogs.php?jobid=23154 D:\sqlmappython sqlmap.py -u http://cep.treslagoas.ms.gov.br/backup/joblogs.php ?jobid=23154 --dbs | | 1.0-dev-nongit-20150806 | -| . | | | .'| . | || |||||,| | || || http://sqlmap.org ! legal disclaimer:...
HybridAuth 2.2.2 - Remote Code Execution
No description provided by source. | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| HybridAuth = 2.2.2 Remote Code Execution Website : http://hybridauth.sourceforge.net/ Exploit Author : @u0x Pichaya Morimoto Release dates : August 5, 2014...
Apache 2.4.x mod_proxy Denial Of Service
Apache versions 2.4.x prior to 2.4.10 suffer from a denial of service condition when modproxy is in use. Software: apache httpd 2.4.7 , possibly others from 2.3 and 2.4 branches. If apache is configured with modproxy module for example in front of a tomcat, or proxypassing requests to other backe...
SuSE 11.3 Security Update : OpenJDK (SAT Patch Number 9209)
This java-170-openjdk update to version 2.4.7 fixes the following security and non-security issues : - Security fixes - S8023046: Enhance splashscreen support - S8025005: Enhance CORBA initializations - S8025010, CVE-2014-2412: Enhance AWT contexts - S8025030, CVE-2014-2414: Enhance stream handli...
java-1.7.0-openjdk security update
1.7.0.51-2.4.7.1.0.1.el65 - Update DISTRONAME in specfile 1.7.0.51-2.4.7.1.el6 - regenerated sources to fix TCK failure - Resolves: rhbz1085002 1.7.0.51-2.4.7.0.el6 - bumped to future icedtea-forest 2.4.7 - updatever set to 55, buildver se to 13, release reset to 0 - removed upstreamed patch402...
Cart Engine 3.0.0 (task.php) Local File Inclusion Vulnerability
Cart Engine suffers from an authenticated file inclusion vulnerability LFI when input passed thru the 'run' parameter to task.php is not properly verified before being used to include files. This can be exploited to include files from local resources with directory traversal attacks. Version 3.0....
Kemana Directory 1.5.6 Password Hash Disclosure Vulnerability
Kemana contains a flaw that is due to the 'kemanaadminpasswd' cookie storing user password SHA1 hashes. This may allow a remote MitM attacker to more easily gain access to password information. Version 1.5.6 is affected. Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosur...
Kemana Directory 1.5.6 - task.php Local File Inclusion
Kemana Directory 1.5.6 - task.php Local File Inclusion Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or...
Kemana Directory 1.5.6 - Database Backup Disclosure
$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $bar=floor$pe...
Kemana Directory 1.5.6 - 'task.php' Local File Inclusion
Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features...
Piwigo Cross Site Request Forgery and Path Traversal Vulnerabilities
Piwigo is prone to cross-site request forgery CSRF and path traversal vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
