Atlassian JIRA Multiple Cross Site Scripting Vulnerabilities

Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Hackers Push Jailbreak for iOS 4.2 Devices

A leading group of mobile device hackers have released a software update that allows iPhone and iPad users to circumvent content controls using the latest version of Apple’s iOS operating system. The so-called “jailbreak” was released within hours of Apple’s own release of iOS 4.2.1 by the iPhone...

Новые уязвимости в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и Local File Inclusion уязвимостях в W-Agora. XSS WASC-08: http://site/news/for-print.php3?bn=x&key=12828507193Cscript3Ealertdocument.cookie3C/script3E...

W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion

Hello Full-Disclosure! I want to warn you about new Cross-Site Scripting and Local File Inclusion vulnerabilities in W-Agora. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous versions. ---------- Details: ---------- XSS WASC-08:...

w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities

w-Agora is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

Уязвимости в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Local File Inclusion уязвимостях в W-Agora. XSS WASC-08: http://site/news/search.php3?bn=3Cbody20onload=alertdocument.cookie3E Local File Inclusion WASC-31: Можно инклюдить php-файлы с расширением php3 в версии W-Agora 4.1.5...

Webspell 4.2.1 search-injection vulnerability and fix-vulnerability warning-the black bar safety net

Webspell 4.2.1 procedures exist to search-typeSQL injectioncould obtain the administrator user password Search injected into the page: http://localhost/webspell/asearch.php?site=search&table=user&column=nickname&exact=true&identifier=userID&searchtemp=searchuser&search= Storm the Admin Password...

Webspell 4.2.1 - 'asearch.php' SQL Injection

INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...

Webspell 4.2.1 - asearch.php SQL Injection

Webspell 4.2.1 - asearch.php SQL Injection INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet,...

webSPELL 4.2.1 asearch.php SQL Injection

INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...

W-Agora 4.2.1 XSS / RFI

======================================================================================== | Title : W-Agora v.4.2.1 Multiple Vulnerabilities | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High...

CVE-2008-5048

CVE-2008-5048 describes a buffer overflow in Atepmon.sys, component of ISecSoft Anti-Trojan Elite, affecting 4.2.1 and earlier (and possibly 4.2.2). The vulnerability is triggered by long inputs to IOCTL 0x00222494, enabling local users to crash the system and potentially execute arbitrary code. ...

Gentoo Security Advisory GLSA 200404-16 (monit)

The remote host is missing updates announced in advisory GLSA 200404-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the a parameter in a searchStr action and the 2 Submit parameter...

CVE-2008-1550

CubeCart 4.2.1 has multiple XSS vulnerabilities in index.php exploitable via the _a parameter in a searchStr action and the Submit parameter, allowing remote attackers to inject arbitrary script/HTML. The NVD entry notes a Medium base score (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with partial integ...

Sql injection

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

No description provided by source. W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Author: R00TATI Contact: [email protected] - http://www.ihteam.net Exploit :...

w-Agora 4.2.1 - 'cat' SQL Injection

W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

Design/Logic Flaw

w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the 1 bn array parameter to index.php, which expects a string, and 2 certain parameters to deleteforum.php, which displays the path name in the resulting error message...