Dolibarr ERP/CRM 3.0.0 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...

Dolibarr 3.0.0 Cross Site Scripting

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...

Dolibarr 3.0.0 Local File Inclusion

------------------------------------------------------------------------ Software................Dolibarr 3.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.dolibarr.org/ Discovery Date..........4/21/2011 Tested...

DEBIAN-CVE-2010-4724

Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors...

CVE-2010-4727

Smarty before 3.0.0 beta 7 does not properly handle the tags, which has unspecified impact and remote attack vectors...

CVE-2009-5052

Smarty before 3.0.0 beta 6 is affected by multiple unspecified vulnerabilities. The entries consistently cite unknown impact and attack vectors, with no concrete details on root cause, affected components, or exploit paths in the provided documents. The scope is limited to the version boundary “b...

Limny 3.0.0 Local File Inclusion

------------------------------------------------------------------------ Software................Limny 3.0.0 Vulnerability...........Local File Inclusion Download................http://www.limny.org/ Release Date............1/24/2011 Tested On...............Windows Vista + XAMPP...

Squirrelcart PRO 3.0.0 - Blind SQL Injection

Squirrelcart PRO 3.0.0 Blind SQL Injection Vulnerability Name Squirrelcart PRO Vendor http://www.squirrelcart.com Versions Affected 3.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-21 X. INDEX I. ABOUT THE...

Automated Solutions OPC Vulnerability

Overview The ICS-CERT has received a report from independent security researcher Jeremy Brown that reveals a heap corruption vulnerability in the Automated Solutions Modbus/TCP Master OPC server. Automated Solutions has confirmed that their most recent patch mitigates the vulnerability for Versio...

Subtitle Translation Wizard 3.0.0 Proof Of Concept

Exploit Title: Subtitle Translation Wizard v3.0.0 SEH POC Date: Jun 21, 2010 Author: Blake Software Link: http://www.upredsun.com/subtitle-translation/download/st-wizard-setup.exe Version: 3.0.0 Tested on: Windows Vista running in VirtualBox SEH is overwritten but only unicode compatible pop pop...

TeamSpeak 3 Server < 3.0.0-beta25 Multiple Remote Vulnerabilities

TeamSpeak 3 server is prone to multiple remote vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

McAfee UTM Firewall Help Reflected Cross-Site Scripting

Advisory Information Advisory ID: NGENUITY-2010-005 Date published: 6/9/2010 Vulnerability Information Class: Reflected Cross-Site Scripting XSS Software Description McAfee UTM Firewall Firmware 3.0.0 to 4.0.6 formerly SnapGear is the affected product line. More information can be found at...

Discuz! NT 3.0.0 background get WEBSHELL-vulnerability warning-the black bar safety net

http://test.com/admin/global/globaltemplatesedit.aspx?path=../&filename=index. aspx&templateid=1&templatename=Default Directly put your horse written in the forum index. aspx Or is the other file. path=../&filename=index. aspx But remember to get the SHELL to put the family file to restore it. Th...

phpcms 3.0.0 file upload vulnerability-vulnerability warning-the black bar safety net

Vulnerability file: ads/upload.php and uppic.php The code is as follows: require "common.php"; require PHPCMSROOT."/ class/upload.php"; if!$ userid message"Please first login or REGISTER!" , PHPCMSPATH."member/login.php"; if$extid==1 $upfiletype= "jpg|png|gif"; elseif $extid==2 $upfiletype= "swf"...

vBulletin 3.0.0 - Cross-Site Scripting

vBulletin 3.0.0 - Cross-Site Scripting Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 =============================================== WWW.sec-war.com =============================================== 3.0.0 - Introduction XSS scripts in the script search.ph...

vBulletin 3.0.0 - Cross-Site Scripting

Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 =============================================== WWW.sec-war.com =============================================== 3.0.0 - Introduction XSS scripts in the script search.php. In fact, a hole through a browser...

vBulletin 3.0.0 XSS Vulnerability

Exploit for unknown platform in category web applications ================================= vBulletin 3.0.0 XSS Vulnerability ================================= Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 3.0.0 - Introduction XSS scripts in the script...

phpcms 3.0.0 upload.php&uppic.php 文件上传漏洞

No description provided by source...

Design/Logic Flaw

The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...

Request Tracker (RT) 3.0.0 - 3.8.5 Session Fixation Vulnerability

Request Tracker RT is prone to a session fixation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...