MemHT Portal 4.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : MemHT Portal 4.0.2 Multiple Vulnerabilities Arbitrary File Upload...

CVE-2012-0453

Cross-site request forgery CSRF vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when modperl is used, allows remote attackers to hijack the authentication of arbitrary users for requests that modify the product's installation via the XML-RPC API...

CVE-2011-3708

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

Information disclosure

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

CVE-2011-3708

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

CVE-2011-3708

CVE-2011-3708 affects Automne 4.0.2. A remote attacker can obtain sensitive information via a direct request to a .php file, with the installation path revealed in an error message (shown by admin/page-redirect-info.php). The connected documents confirm the exposure but do not provide exploitatio...

Fedora 14 : xen-4.0.2-1.fc14 (2011-8403)

update to 4.0.2 - includes various bugfixes and fix for CVE-2011-1898 guest with pci passthrough can gain privileged access to base domain Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Adobe Flash Media Server < 3.5.6 / 4.0.2 Multiple Vulnerabilities (APSB11-11)

The version of Adobe Flash Media Server running on the remote host is earlier than version 3.5.6 or 4.0.2. Such versions are potentially affected by the following vulnerabilities : - The server is affected by a memory corruption issue due to a race condition in the TLS extension code provided by...

N-13 News Cross-Site Request Forgery Vulnerability

This host is running N-13 News and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: gbn13newscsrfvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ N-13 News Cross-Site Request Forgery Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

// source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges. Successful attacks will completely compromise an affected device. // int...

Design/Logic Flaw

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content Failure Audit events, which might allow remote attackers to attempt content access without detection...

JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

Safari Browser 4.0.2 Clickjack

Safari Browser V4.0.2 Clickjacking ClickJacking function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2; document.getElementById'open'.style.top=mouseY-2; Go to the google.com p ali...

Apple Safari 4.0.2 - Clickjacking

Apple Safari 4.0.2 - Clickjacking Safari Browser V4.0.2 Clickjacking ClickJacking function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2; document.getElementById'open'.style.top=mouseY-2; Go to the...

Apple Safari 4.0.2 - Clickjacking

Safari Browser V4.0.2 Clickjacking ClickJacking function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2; document.getElementById'open'.style.top=mouseY-2; Go to the google.com Cl...

PT-2010-1129 · Libtiff +2 · Libtiff +2

Name of the Vulnerable Software and Affected Versions: LibTIFF version 3.9.0 tiff versions prior to 4.0.2-r1 Description: The issue allows remote attackers to cause a denial of service, potentially leading to an out-of-bounds read and application crash, via a TIFF file with an invalid combination...

Design/Logic Flaw

The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80012010 request to the DLPCryptCore device...

CVE-2009-4832

The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80012010 request to the DLPCryptCore device...

Juke 4.0.2 Denial Of Service

Exploit Title: Juke 4.0.2 DoS Multiple Files Date: April 6, 2010 Software Link: http://www.wolosoft.com/en/download.html Version: 4.0.2 Tested on: Windows XP SP3 Author: chap0 Email: chap0x90 gmail com Juke will Crash when you run this script to make a file with any of the following extensions .x...

Juke 4.0.2 DoS Multiple Files

Exploit for windows platform in category dos / poc ============================= Juke 4.0.2 DoS Multiple Files ============================= Exploit Title: Juke 4.0.2 DoS Multiple Files Date: April 6, 2010 Software Link: http://www.wolosoft.com/en/download.html Version: 4.0.2 Tested on: Windows X...