PMB 4.1.3 - (Authenticated) SQL Injection

Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files...

AceShop, up to version 4.1.3,

AceShop, up to version 4.1.3, SQL Injection...

SunOS <= 4.1.3 LD_LIBRARY_PATH and LD_OPTIONS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/43/info There exists a vulnerability involving environment variables and setuid/setgid programs under SunOS 4.0 and higher. A dynamically-linked program that is invoked by a setuid/setgid program has access to the caller'...

SunOS <= 4.1.3 kmem setgid /etc/crash Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash ! sh...

Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.3 Information Disclosure

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.3. It is, therefore, affected by an information disclosure vulnerability due to LDAP bind passwords being logged in plaintext when using default logging settings. Note that the 3.1 branch is not affected by thi...

Fedora 20 : samba-4.1.3-2.fc20 (2013-23177)

Fix NULL pointer derreference in winbind debug message. Update to version 4.1.3 which fixes two security bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Samba 3.x < 3.6.22 / 4.0.x < 4.0.13 / 4.1.x < 4.1.3 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 3.3.x equal or later than 3.3.10, 3.4.x, 3.5.x, 3.6.x prior to 3.6.22, 4.0.x prior to 4.0.13 or 4.1.x prior to 4.1.3. It is, therefore, potentially affected by multiple vulnerabilities : - A security bypass vulnerability...

Security fix for the ALT Linux 8 package samba version 4.1.3-alt1

Dec. 9, 2013 Alexey Shabalin 4.1.3-alt1 - 4.1.3 - fixed CVE-2013-4408, CVE-2012-6150...

Fedora Update for xen FEDORA-2012-19828

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-19828 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 16 : xen-4.1.3-6.fc16 (2012-19828)

A guest can cause xen to crash XSA-26, CVE-2012-5510 883082 An HVM guest can cause xen to run slowly or crash XSA-27, CVE-2012-5511 883084 An HVM guest can cause xen to crash or leak information XSA-28, CVE-2012-5512 883085 A PV guest can cause xen to crash and might be able escalate privileges...

Sql injection

SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter...

CVE-2012-5910

CVE-2012-5910 is a SQL injection in blogs/htsrv/viewfile.php of b2evolution 4.1.3. An authenticated remote user can inject SQL via the root parameter to execute arbitrary commands. Impact is partial confidentiality/integrity/availability as stated; attack vector is web-based with single-privilege...

[SET] Social-Engineer Toolkit 4.1.3

TrustedSec Release the latest version of Social-Engineer Toolkit SET as 4.1.3. As most of us know that, It is an open source, python-driven, social-engineering penetration testing framework of custom tools which solely focuses on attacking the human element of penetration testing. It was designed...

Fedora 16 : xen-4.1.3-2.fc16 (2012-13443)

a malicious 64-bit PV guest can crash the dom0 XSA-12, CVE-2012-3494 854585 a malicious crash might be able to crash the dom0 or escalate privileges XSA-13, CVE-2012-3495 854589 a malicious PV guest can crash the dom0 XSA-14, CVE-2012-3496 854590 a malicious HVM guest can crash the dom0 and might...

Fedora 17 : xen-4.1.3-4.fc17 (2012-13434)

disable qemu monitor by default XSA-19, CVE-2012-4411 855141 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 17 : xen-4.1.3-2.fc17 (2012-11755)

fix for 845444 broke xend under systemd, update to 4.1.3, includes fix for untrusted HVM guest can cause the dom0 to hang or crash XSA-11, CVE-2012-3433 843582 remove some unnecessary cache flushing that slow things down, change python options on xend to reduce selinux problems 845444 Note that...

Fedora 16 : xen-4.1.3-1.fc16 (2012-11785)

update to 4.1.3 - fixes untrusted HVM guest can cause the dom0 to hang or crash XSA-11, CVE-2012-3433 843582 remove some unnecessary cache flushing that slow things down 841330 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

PYSEC-2011-22

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

Code injection

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...

CVE-2011-4462

Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted parameters...