CVE-2012-1611

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599...

Design/Logic Flaw

Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."...

CentOS Update for glibc CESA-2012:1207 centos5

Check for the Version of glibc OpenVAS Vulnerability Test CentOS Update for glibc CESA-2012:1207 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Clipbucket 2.5 Blind SQL Injection

Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia Management Script Provided Free to th...

SePortal 2.5 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: SePortal 2.5 CSRF Vulnerability Author: DaOne LCA Date: 19/8/2012 Software Link: http://www.seportal.org CSRF Add Admin 0day.today 2018-01-10...

Clipbucket 2.5 - Cross-Site Request Forgery

Exploit Title: ClipBucket 2.5 CSRF Vulnerability Author: DaOne LCA Date: 15/8/2012 Software Link: http://clip-bucket.com/ Or: http://sourceforge.net/projects/clipbucket/ CSRF Add Admin thanks to : Ly.Lolsec...

Clipbucket 2.5 - Cross-Site Request Forgery

Clipbucket 2.5 - Cross-Site Request Forgery Exploit Title: ClipBucket 2.5 CSRF Vulnerability Author: DaOne LCA Date: 15/8/2012 Software Link: http://clip-bucket.com/ Or: http://sourceforge.net/projects/clipbucket/ CSRF Add Admin thanks to : Ly.Lolsec...

ClipBucket 2.5 Cross Site Request Forgery

Exploit Title: ClipBucket 2.5 CSRF Vulnerability Author: DaOne LCA Date: 15/8/2012 Software Link: http://clip-bucket.com/ Or: http://sourceforge.net/projects/clipbucket/ CSRF Add Admin thanks to : Ly.Lolsec...

ClipBucket 2.5 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: ClipBucket 2.5 CSRF Vulnerability Author: DaOne LCA Date: 15/8/2012 Software Link: http://clip-bucket.com/ Or: http://sourceforge.net/projects/clipbucket/ CSRF Add Admin thanks to : Ly.Lolsec 0day.today 2018-03-12...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 application/views/admin/layout.php and 2 themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name...

CVE-2012-4071

Cross-site scripting XSS vulnerability in the comments module in the RSGallery2 comrsgallery2 component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment...

CVE-2012-3554

SQL injection vulnerability in the RSGallery2 comrsgallery2 component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Debian Security Advisory DSA 2504-1 (libspring-2.5-java)

The remote host is missing an update to libspring-2.5-java announced via advisory DSA 2504-1. OpenVAS Vulnerability Test $Id: deb25041.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2504-1 libspring-2.5-java Authors: Thomas Reinke Copyright: Copyright c 20...

Debian: Security Advisory (DSA-2504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Proventia Network Mail Security System 2.5 - POST File Read

IBM Proventia Network Mail Security System 2.5 - POST File Read !/usr/bin/python ''' Author: muts of Offensive Security Product: IBM ISS Proventia Mail Security Version: 2.5 Vendor Site: http://www.ibm.com/us/en/ Product Page:...

Cross site scripting

Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2309

Summary of CVE-2012-2309 (Drupal Glossify module) : The vulnerability is a cross-site scripting (XSS) flaw in the Glossify Internal Links Auto SEO contributed module for Drupal 6.x-2.5 and earlier. It allows remote authenticated users with certain roles to inject arbitrary web script or HTML via ...

CVE-2012-2309

Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

Debian DSA-2504-1 : libspring-2.5-java - information disclosure

It was discovered that the Spring Framework contains an information disclosure vulnerability in the processing of certain Expression Language EL patterns, allowing attackers to access sensitive information using HTTP requests. NOTE: This update adds a springJspExpressionSupport context parameter...

[SECURITY] [DSA 2504-1] libspring-2.5-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2504-1 [email protected] http://www.debian.org/security/ Florian Weimer June 28, 2012 http://www.debian.org/security/faq -...