DUportal 3.1.2 inc_poll_voting.asp DAT_PARENT Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...

Embedthis Appweb 3.1.2 - Remote DoS

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

iPhone FTP Server By Zhang Boyang Remote DoS Exploit

No description provided by source. !/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10 Author: Ale46 Software Link: http://itunes.apple.com/us/app/ftp-server/id356055128?mt=8 Version: 1.0 Tested on: Iphone 3GS with 3.1.2 firmware Greetz: Gandalf use IO::Socket; ...

SnackAmp 3.1.2 - (.wav) Buffer Overflow Vulnerability (PoC)

No description provided by source. Exploit Title: SnackAmp 3.1.2 Malicious WAV Buffer Overflow Vulnerability POC Date: 08/28/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.2 Tested on: Windows XP SP3 EN CVE: N/A ! /usr/bin/env...

Puppet Enterprise 3.x < 3.1.2 DTLS Retransmission DoS

According to its self-reported version number, the Puppet Enterprise 3.x install on the remote host is prior to 3.1.2. As a result, it is reportedly affected by an error related to the included OpenSSL version and DTLS retransmission processing that could allow denial of service attacks...

Quantum vmPRO 3.1.2 - Privilege Escalation

Unlike traditional backup applications and other backup applications designed for virtual environments, Quantum vmPRO Software backs up VMs in native VMware format. This enables users to restore or boot VMs in seconds without the use of a backup application, reduces virtual server and network usa...

CVE-2013-7243

CVE-2013-7243 concerns GetSimple CMS versions 3.1.2 and 3.2.3, which are vulnerable to multiple cross-site scripting (XSS) vulnerabilities. The weaknesses allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php and (2) Display name field to settings.p...

CVE-2013-4293

CVE-2013-4293 affects Red Hat JBoss Operations Network (JON) 3.1.2. The server stores passwords in plaintext in log files, enabling a local attacker with log access to obtain sensitive credentials. This is a local, file-based disclosure vulnerability. The Red Hat advisory RHSA-2013:1448 notes a s...

CVE-2013-4373

Red Hat JBoss Operations Network 3.1.2 is affected by CVE-2013-4373. The vulnerability is in JPADriftServerBean.storeFiles, which creates a predictable temporary directory when unpacking a zip file, allowing a local attacker to place their own drift files into the server. Impact is local, enablin...

CVE-2013-0211

Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper conversion between...

GetSimple 3.1.2 Code Execution

'; echo 'and login without password, right? Generated cookie: '; echo $cookiename . ''; echo 'Anyway: this simple code exploits vulnerability in :'; echo 'admin/settings.php:'; if $authenticated YES - set the login cookie, then redirect user to secure panel // createco...

Oracle GlassFish / Java System Application Server CORBA ORB Subcomponent DoS Vulnerability (Oct 2012)

Oracle GlassFish / Java System Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora 16 : kernel-3.1.2-1.fc16 (2011-16237)

Update to kernel 3.1.2: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.2 Additional changes : - Partially fix reported stalls during heavy I/O - Fix problems with udev probing Wacom bluetooth tablets Note that Tenable Network Security has extracted the preceding description block...

POSH Local File Include and Cross Site Scripting Vulnerabilities

POSH is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the contex...

SUSE: Security Advisory for MozillaFirefox, MozillaThunderbird, seamonkey (SUSE-SA:2011:037)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress <= 3.1.2 - Unspecified vulnerability #1

Because of this vulnerability, there are unknown impact and attack vectors related to "Various security hardening." in this WordPress version. Solution Update WordPress...

WordPress 'press-this.php'远程安全绕过漏洞

Bugtraq ID: 47598 WordPress是一款流行的blog系统。 在发布帖子时wp-admin/press-this.php脚本不正确检查用户权限，用户可无需"publishposts"权限发布文章。 要成功利用此漏洞需要"Contributor-level"特权。 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 2.9.2...

PT-2011-1484 · Xen +2 · Xen +2

Name of the Vulnerable Software and Affected Versions: Xen version 3.1.2 Linux kernel version 2.6.18 on Red Hat Enterprise Linux RHEL 5 Description: The issue allows guest OS users to cause a denial of service, resulting in a host OS panic. This occurs when there is an attempted access to a virtu...

CVE-2010-3424

CVE-2010-3424 represents a Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board)

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can...