675 matches found
Route Validation Bypass
Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...
Moodle 2.8.x < 2.8.10 / 2.9.x < 2.9.4 / 3.0.x < 3.0.2 XSS
Binary data 9192.prm...
Freebox OS Web interface cross-site scripting vulnerability
The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site scripting vulnerability exists in version 3.0.2 of the Freebox OS Web interface, which stems from the program not adequately filtering user-submitted input. When a user browses the affected...
Zurmo CRM Cross-Site Scripting Vulnerability
Zurmo CRM is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo CRM version 3.0.2. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML via the...
DEBIAN-CVE-2015-4335
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the foomatic-3.0.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
FancyBox for WordPress XSS Vulnerability
FancyBox for WordPress is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; if...
Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress plugin Fancybox-for-WordPress 3.0.2 Stored XSS Exploit Author: NULLpOint7r Date: 2015-02-11 Contact me: email protected Version: 3.0.2 Download link:...
CVE-2015-1419
Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to denyfile parsing...
Joomla! <= 3.0.2 (highlight.php) PHP Object Injection Vulnerability
No description provided by source. ------------------------------------------------------------------- Joomla! = 3.0.2 highlight.php PHP Object Injection Vulnerability ------------------------------------------------------------------- - Software Link: http://www.joomla.org/ - Affected Versions:...
vbPortal 3.0.2 <= 3.6.0 b1 - (cookie) Remote Code Excution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo vbPortal 3.0.2 = 3.6.0 Beta 1 Remote Command Excution \r\n; echo By R00tATI Mail : havoc1988 at gmail dot com \r\n; echo Thank you Minus-Power \r\n; echo Thank you rgod for your clear samples \r\n; echo site:...
phpBB remote denial of service vulnerability-vulnerability warning-the black bar safety net
phpBB remote denial of service vulnerability Vulnerability version: phpBB phpBB 3.0.8 phpBB phpBB 3.0.7 phpBB phpBB 3.0.6 phpBB phpBB 3.0.5 phpBB phpBB 3.0.4 phpBB phpBB 3.0.3 phpBB phpBB 3.0.2 phpBB phpBB 3.0.1 phpBB phpBB 3.0 phpBB phpBB 2.0.21 phpBB phpBB 2.0.19 phpBB phpBB 2.0.17 phpBB phpBB...
appRain 3.0.2 SQL Injection
SQL Injection vulnerability in appRain Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
CVE-2010-5295
Cross-site scripting XSS vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action...
CVE-2010-5294
Multiple cross-site scripting XSS vulnerabilities in the requestfilesystemcredentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error message for a 1 FTP or 2 SSH connection attempt...
CVE-2010-5295
Cross-site scripting XSS vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action...
Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/65438/info Projoom NovaSFH plugin for Joomla! is prone to an arbitrary-file-upload vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files; this can result in arbitrary code...
Debian DSA-2814-1 : varnish - denial of service
A denial of service vulnerability was reported in varnish, a state of the art, high-performance web accelerator. With some configurations of varnish a remote attacker could mount a denial of service child-process crash and temporary caching outage via a GET request with trailing whitespace...
appRain CMF 3.0.2 - CSRF Add/Delete Admin Account Vulnerability
Exploit for php platform in category web applications Exploit Title: Apprain CMF / CSRF ADD/DELETE administrator's account Date: 2013 29 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...