vBulletin 5.4.3 Open Redirect Vulnerability

According to the self-reported version in its response header, the version of vBulletin hosted on the remote web server is 5.4.4. It is, therefore, affected by an open redirect vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's...

CVE-2018-20713

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404...

CVE-2018-15493

vBulletin 5.4.3 has an Open Redirect...

CVE-2018-15493

CVE-2018-15493 affects vBulletin 5.x, specifically version 5.4.3, describing an Open Redirect vulnerability. Public sources in the connected documents consistently state an open redirect for vBulletin 5.4.3; CVSS metrics show base scores: CVSS2 v2.0 5.8 (partial confidentiality and integrity impa...

CVE-2018-15493

vBulletin 5.4.3 has an Open Redirect...

Elastic Kibana X-Pack 'CVE-2017-8443' Information Disclosure Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana X-Pack 'CVE-2017-8442' Information Disclosure Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiManager Open Redirect Vulnerability (FG-IR-17-014)

Fortinet FortiManager is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Elastic Stack 5.4.3 Security update

Kibana X-Pack Security user credentials disclosure ESA-2017-11 In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the...

Internet Bug Bounty: Use after free with assign by ref to overloaded objects

Reported: 2015-07-15 16:30 UTC Fixed: 2015-07-21 14:20 UTC Bug Report: https://bugs.php.net/bug.php?id=70083 Fixed in PHP 5.6: http://git.php.net/?p=php-src.git;a=commitdiff;h=f57cb13c566613eec0e1c2f6d96d18565436a9b7 Fixed in 7:...

Printer Pro 5.4.3 IOS - Cross Site Scripting Vulnerability

Exploit for iOS platform in category local exploits Document Title: =============== Printer Pro 5.4.3 IOS - Cross Site Scripting Credits & Authors: ================== TaurusOmar - @TaurusOmar email protected taurusomar.blogspot.com Release Date: ============= 2015-08-11 Product & Service...

Printer Pro 5.4.3 Cross Site Scripting

Document Title: =============== Printer Pro 5.4.3 IOS - Cross Site Scripting Credits & Authors: ================== TaurusOmar - @TaurusOmar [email protected] taurusomar.blogspot.com Release Date: ============= 2015-08-11 Product & Service Introduction: =============================== Print...

PHP <= 5.4.3 (com_event_sink) Denial of Service

No description provided by source. ?php / PHP = 5.4.3 comeventsink Code Execution Proof of Concept Found by condis Website: http://cond.psychodela.pl Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP 5.3.10 + Windows XP SP3 Professional PL PHP 5.4.0 + Windows XP SP3 Professional PL PHP...

CVE-2013-7343

CVE-2013-7343 describes a cross-site scripting (XSS) vulnerability in Flowplayer’s Flash fallback component, specifically in the flowplayer.swf used by Flowplayer HTML5 5.4.3. The issue allows remote attackers to inject arbitrary web script or HTML by abusing URL encoding within the name of the c...

GDL 4.2 - Multiple Vulnerabilities

Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...

php5. 4. 3 remote code execution vulnerabilities, and provide the right kind of work-vulnerability warning-the black bar safety net

PHP comprinttypeinfovulnerability through PHP code to call"exec"to run the SHELL command With this mention of the right is not very convenient? // Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant...

PHP apache_request_headers Function Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PHP apacherequestheaders Function...

PHP 5.4.3 - apache_request_headers Function Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PHP apacherequestheaders Function...

PHP 5.4.3 (cli) code read vulnerability

Exploit for php platform in category web applications ============================================================= Exploit Title: PHP 5.4.3 cli code read vulnerability Date: 2012/13/06 Author: cheki Software Link: http://php.net/downloads.php Version: PHP 5.4.3 cli built: May 9 2012 15:06:10...