XOOPS 2.5.4 Cross Site Scripting

Exploit for php platform in category web applications Product: XOOPS Vendor: xoops.org Vulnerable Versions: 2.5.4 and probably prior Tested Version: 2.5.4 Vendor Notification: 7 December 2011 Vendor Patch: 22 February 2012 Public Disclosure: 18 April 2012 Vulnerability Type: XSS Cross Site...

XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53143/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XOOPS 2.5.4 - modulespmpmlite.php?to_userid Cross-Site Scripting

XOOPS 2.5.4 - modulespmpmlite.php?touserid Cross-Site Scripting source: https://www.securityfocus.com/bid/53143/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Xoops 2.5.4 blind and fix-vulnerability warning-the black bar safety net

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Download address: Author: blkhtc0rp www.badguest.cn blkhtc0rpatyahoodotcom Test platform: Freebsd 8 and Debian Squeeze Comment: In order to be successful an attacker must have...

Xoops 2.5.4 Blind SQL Injection Vulnerability

No description provided by source. Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian Squeeze Note: In order to be successful an attacker must have permission to access the...

Xoops 2.5.4 - Blind SQL Injection

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian...

Xoops 2.5.4 - Blind SQL Injection

Xoops 2.5.4 - Blind SQL Injection ------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom...

Avidemux <= 2.5.4 Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc =============================================== Avidemux Start Avidemux -- Load/Run Project -- crash!! Note: You can also use another video file format you would have to change the Format in Line and maybe some other stuff 54 too file = ARGV0 if...

Avidemux 2.5.4 - Buffer Overflow

!/usr/bin/env ruby avidemuxcrash.rb Title : Avidemux Start Avidemux -- Load/Run Project -- crash!! Note: You can also use another video file format you would have to change the Format in Line and maybe some other stuff 54 too file = ARGV0 if file.nil? puts "Usage: ruby FILE " exit end name =...

Fedora 13 : Miro-2.5.4-3.fc13 / firefox-3.6.2-1.fc13 / galeon-2.0.7-25.fc13 / etc (2010-5202)

Update to new upstream Firefox version 3.6.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner...

Fedora 11 : Miro-2.5.4-2.fc11 / blam-1.8.5-18.fc11 / chmsee-1.0.1-15.fc11 / eclipse-3.4.2-20.fc11 / etc (2010-1936)

Update to new upstream Firefox version 3.5.8, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.8 Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2010-1055

Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configforuminstalled parameter to 1 forum/adminLogin.php and 2 forum/userLogin.php...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

Super Simple Blog Script 2.5.4 (entry) SQL Injection Vulnerability

No description provided by source. ----------exploit Debut Remote SQL Injection Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : mm : Moghla9 Ferme Closed ----------Script Info Site:http : http://www.supersimple.org/ Download :...

Super Simple Blog Script 2.5.4 Local File Inclusion Vulnerability

No description provided by source. ----------exploit Debut Local File Inclusion Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : mm : Moghla9 Ferme Closed ----------Script Info Site:http : http://www.supersimple.org/ Download :...

PowerNews 2.5.4 - newsid SQL Injection

PowerNews 2.5.4 - newsid SQL Injection ...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz...

PowerNews 2.5.4 - 'newsid' SQL Injection

...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...

Postfix 'epoll' Linux事件处理器本地拒绝服务漏洞

BUGTRAQ ID: 30977 CNCAN ID：CNCAN-2008090307 Postfix是一款开放源代码的邮件传输代理，运行在不同类型的UNIX系统上。 Linux下的Postfix处理非Postfix命令存在问题，本地攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 Linux2.6内核下的Postfix 2.4在执行非postfix命令时存在epoll文件描述符泄漏，如一个用户的$HOME/.forward文件，本地用户访问泄漏的epoll文件描述符可对Postfix实现拒绝服务攻击。攻击可导致降低Postfix性能或使Postfix由于触发内部安全机制而自动关闭。...

CVE-2008-2819

SQL injection vulnerability in BlognPlus BURO GUN + 2.5.4 and earlier MySQL and PostgreSQL editions allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-5426

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...