CVE-2009-4120

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

CVE-2009-4120

Multiple cross-site request forgery CSRF vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete orders via an orders-delete action to admin.php, and possibly 2 delete products or 3 delete pages via unspecified vectors...

CVE-2009-3836

ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of service Access Point crash via a malformed 802.11 Association Request management frame...

Samba错误配置/etc/passwd文件绕过安全限制漏洞

BUGTRAQ ID: 36363 CVE ID: CVE-2009-2813 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果/etc/passwd中的用户错误的配置为拥有空的主目录（::）且启用了自动homes共享，或用该用户名创建了明确的共享，则任何连接到该共享名的客户端都可以访问root（/）之下的整个文件系统。 Samba Samba 3.4 Samba Samba 3.3 Samba Samba 3.2 Samba Samba 3.0 临时解决方法：...

Bugzilla 'show_bug.cgi' Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Successful exploits will allow authenticated attackers to obtain potentially sensitive information that may aid in further attacks. The following are vulnerable: Bugzilla 3.3.4, 3.4rc1, and 3.4. OpenVAS Vulnerability Test $Id:...

Adobe Flex SDK Cross-Site Scripting Vulnerability - Windows

Adobe Flex SDK is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flex 3.3 Cross Site Scripting

================================================== Adobe Flex 3.3 SDK DOM-Based XSS Public Release Date: 8/19/2009 Adam Bixby - Gotham Digital Science Affected Software: Adobe Flex 3.3 SDK and earlier ================================================== 1. Summary...

Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execute arbitrary script code in the...

Tutorial Share 3.5.0 Insecure Cookie

-------------------------------------------------------------- Tutorial Share 3.4 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Auothr :Evil-Cod3r Home: Creativexploit.com Contact : [email protected] & [email protected] Software : Tutorial...

Tutorial Share 3.5.0 - Insecure Cookie Handling

Tutorial Share 3.5.0 - Insecure Cookie Handling -------------------------------------------------------------- Tutorial Share 3.4 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Auothr :Evil-Cod3r Home: Creativexploit.com Contact :...

Tutorial Share 3.5.0 - Insecure Cookie Handling

-------------------------------------------------------------- Tutorial Share 3.4 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Auothr :Evil-Cod3r Home: Creativexploit.com Contact : [email protected] & [email protected] Software : Tutorial...

Photo Graffix 3.4 Multiple Remote Vulnerabilities

No description provided by source. =-=-shell upload/local file-=-= -=-=-=-=-=-=-=-=-=-= script::Photo-GraffixV3.4.zip Author: ahmadbady =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://www.photo-graffix.com/V3/Photo-GraffixV3.4.zip...

photo graffix 3.4 - Multiple Vulnerabilities

=-=-shell upload/local file-=-= -=-=-=-=-=-=-=-=-=-= script::Photo-GraffixV3.4.zip Author: ahmadbady =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://www.photo-graffix.com/V3/Photo-GraffixV3.4.zip =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= upload: /path/mp3upload.htm...

Nuke ET 3.4 - 'FCKeditor' Arbitrary File Upload

?php / --------------------------------------------------------------- Nuke ET = 3.4 fckeditor Remote Arbitrary File Upload Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.truzone.org/ This PoC was...

CVE-2008-4349

The CVE-2008-4349 entry relates to multiple XSS vulnerabilities in the news.php component of s0nic Paranews 3.4, exploitable via the (1) id or (2) page parameter in a details action. Evidence from NVD and related records confirms a cross-site scripting flaw that could allow remote attackers to in...

paranews-xss.txt

Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...

OpenBSD (ibcs2_exec) Kernel Local Exploit

No description provided by source. // // Patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/005exec.patch // include sys/types.h include sys/stat.h include fcntl.h include stdio.h / $OpenBSD: ibcs2exec.h,v 1.3 2002/03/14 01:26:50 millert Exp $ / / $NetBSD: ibcs2exec.h,v 1.4 1995/03/14...

CVE-2008-2493

Cross-site scripting XSS vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter...

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficient...