XOOPS 2.5 - 'imagemanager.php' Local File Inclusion

source: https://www.securityfocus.com/bid/47418/info XOOPS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view arbitrary local files within the context of the webserver process. Successfully...

CVE-2010-4771

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4772

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

Sql injection

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4771

CVE-2010-4771 affects S-CMS 2.5, due to an SQL injection in viewforum.php where the id parameter enables remote attackers to execute arbitrary SQL commands. Reported impact aligns with a base score of 7.5 (HIGH) and network access with low attack complexity. The provided connected documents confi...

CVE-2010-4772

Cross-site scripting XSS vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php...

CVE-2010-4772

CVE-2010-4772 documents an XSS vulnerability in S-CMS 2.5. The issue resides in blocks/lang.php, where the id parameter passed to viewforum.php is susceptible to script/HTML injection. The vulnerability is triggered remotely via that parameter, enabling an attacker to inject arbitrary web script ...

EAFlashUpload 2.5 - Arbitrary File Upload

EAFlashUpload 2.5 - Arbitrary File Upload Exploit Title: EAFlashUpload v 2.5 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: EAFlashUpload v 2.5 Software Link:...

iPhone Folders 2.5 Directory Traversal

Exploit for hardware platform in category remote exploits ---------------------------------------------------------------- Software : iPhone Folders 2.5 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High...

iPhone Folders 2.5 Directory Traversal

---------------------------------------------------------------- Software : iPhone Folders 2.5 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ---------------------------------------------------------------- Program Developer :...

iphone folders 2.5 - Directory Traversal

---------------------------------------------------------------- Software : iPhone Folders 2.5 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ---------------------------------------------------------------- Program Developer :...

iphone folders 2.5 - Directory Traversal

iphone folders 2.5 - Directory Traversal ---------------------------------------------------------------- Software : iPhone Folders 2.5 Type of vunlnerability : Directory Traversal Tested On : iPhone 4 IOS 4.0.1 Risk of use : High ----------------------------------------------------------------...

XWiki < 2.5 Unspecified SQLi and XSS Vulnerabilities

XWiki is prone to unspecified SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

StageTracker 2.5 - Denial of Service

Exploit Title: StageTracker 2 Local POC Date: 04.01.2011 Author: freakout Version: 2.5 Tested on: Windows XP SP3 Type: DOS/POC Greetings: anco, mahjong, puddy, st!x, war10ck, fraggle, DarthShredder, ph3n0m, starslayer, db, lufthansen E-Mail: [email protected]...

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

jboss-remoting: missing fix for CVE-2010-3862

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 through 4.3.0.CP09 allows remote attackers to caus...

S_CMS 2.5 - Multiple Vulnerabilities

============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms/ Vulnerability Type: Full Path...

MiniBB 2.5 Cross Site Scripting / SQL Injection

====================================== Vulnerability ID: HTB22670 Reference: http://www.htbridge.ch/advisory/bbcodexssinminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: XSS Cross Site Scripting...

Mandriva Linux Security Advisory : python (MDVSA-2010:215)

Multiple vulnerabilities was discovered and corrected in python : Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service application crash via a large ZSIZE value in a black-and-white aka B/W RGB image that triggers an invalid pointer dereference...