Piwigo 2.5.3 Cross Site Request Forgery

Exploit Title: Piwigo 2.5.3 CMS:Multiple vulnerability's Author: sajith version: Piwigo 2.5.3 Vendor Homepage: http://piwigo.org vulnerable app link:http://www.piwigo.org/basics/downloads 1 Stored XSS on Multiple parameters click on Add photos http://127.0.0.1/cms/piwigo/admin.php?page=photosadd...

CVE-2013-4525

Cross-site scripting XSS vulnerability in mod/quiz/report/responses/responsestable.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question...

CVE-2012-3523

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection"...

Command injection

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection"...

[ MDVSA-2012:156 ] inn

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:156 http://www.mandriva.com/security/ Package : inn Date : October 2, 2012 Affected: 2011. Problem Description: A security issue was identified and fixed in ISC INN: The STARTTLS implementation in INNs NNTP...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header...

CVE-2012-3829

Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header...

CVE-2012-3828

CVE-2012-3828 affects Joomla! 2.5.3 with a cross-site scripting (XSS) vulnerability exploitable via the Host HTTP Header, allowing remote script/HTML injection. Root cause described as insufficient validation of the Host header. Impact is client-side script execution potential; no explicit exploi...

Joomla <2.5.3 远程特权提升漏洞

No description provided by source...

JVN#41222793: Plone vulnerable to cross-site scripting

Plone is an open source content management system CMS. Plone contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the Software Update to the latest version according to the information provided by...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

Sql injection

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-3659

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2009-3659

CVE-2009-3659 affects BS Counter 2.5.3, where an SQL injection vulnerability exists in file/stats.php exploitable via the page parameter. The issue enables remote attackers to execute arbitrary SQL commands, with CVSS v2 base score 7.5 (HIGH) and network attack vector, low complexity, no authenti...

CVE-2009-3659

SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Bs Counter 2.5.3 SQL Injection

Bs Counter 2.5.3 page Sql İnjectşon Vuln. Bgh7 Turk Bilisim Gucleri Script Downlaod http://scripti.org/indir.php?id=595 Expl0it; http://www.target.com/file/stats.php?page='insert+into+counter+countertitle+values+'HackedByBgh7 tu bi gu' Bingoo ! counter name ediT =...

Bs Counter 2.5.3 - 'page' SQL Injection

Bs Counter 2.5.3 page Sql Ä°njectÅŸon Vuln. Bgh7 Turk Bilisim Gucleri Script Downlaod http://scripti.org/indir.php?id=595 Expl0it; http://www.target.com/file/stats.php?page='insert+into+counter+countertitle+values+'HackedByBgh7 tu bi gu' Bingoo ! counter name ediT = milw0rm.com 2009-09-14...

Bs Counter 2.5.3 - page SQL Injection

Bs Counter 2.5.3 - page SQL Injection Bs Counter 2.5.3 page Sql Ä°njectÅŸon Vuln. Bgh7 Turk Bilisim Gucleri Script Downlaod http://scripti.org/indir.php?id=595 Expl0it; http://www.target.com/file/stats.php?page='insert+into+counter+countertitle+values+'HackedByBgh7 tu bi gu' Bingoo ! counter name...