249 matches found
Liferay Portal 6.1.0 / 6.1.10 Arbitrary File Deletion
According to its self-reported version, the installation of Liferay Portal hosted on the remote web server is affected by an arbitrary file deletion vulnerability. A user who has permission to delete an attachment in the Wiki portlet can delete any arbitrary file on the server. Note that Nessus h...
Liferay Portal 6.1.0 Forward Target Handling Security Bypass
The version of Liferay Portal hosted on the remote web server contains a flaw in the 'PortletRequestDispatcherImpl' class's 'dispatch' method that allows a remote, unauthenticated attacker to create new administrative users. Since administrative users can install new plugins and extensions, this...
CVE-2012-1036
Cross-site scripting XSS vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message...
CVE-2011-3803
SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layoututils.php and certain other files...
Information disclosure
SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layoututils.php and certain other files...
IBM WebSphere Application Server (WAS) Security Bypass Vulnerability - March 2011
The host is running IBM WebSphere Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbibmwassecbypassvulnmar11.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server WAS Security Bypass Vulnerability - March 2011 Authors: Sooraj KS...
IBM WebSphere Application Server (WAS) Multiple Vulnerabilities 02 - March 2011
The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmwasmultvulnmar1102.nasl 7052 2017-09-04 11:50:51Z teissa $ IBM WebSphere Application Server WAS Multiple Vulnerabilities 02 - March 2011 Authors: Sooraj KS Copyright...
rpc.pcnfsd Remote Format String Exploit
Exploit for aix platform in category remote exploits ======================================= rpc.pcnfsd Remote Format String Exploit ======================================= / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format stri...
rpc.pcnfsd - Remote Format String
/ Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define PCNFSDPRSTART 3 struct cmsend char s1;...
rpc.pcnfsd - Remote Format String
rpc.pcnfsd - Remote Format String / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define...
CVE-2010-1348
Unspecified vulnerability in the login process in IBM WebSphere Portal 6.0.1.1, and 6.1.0.x before 6.1.0.3 Cumulative Fix 03, has unknown impact and remote attack vectors...
Discuz! 6.0.0&6.1.0 spache.php SQL注入漏洞
No description provided by source...
discuz 6.1.0 跨站脚本漏洞
No description provided by source...
discuz 6.1.0 database.inc.php 文件上传
No description provided by source...
discuz 6.1.0 cache.func.php 信息泄漏漏洞
No description provided by source...
AIX ToolTalk Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Visualization Engine VE in IBM Tivoli Composite Application Manager for WebSphere ITCAM 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)
This module exploits a buffer overflow vulnerability in ttinternalrealpath function of the ToolTalk database server rpc.ttdbserverd. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ToolTalk...
SOL10020 - Multiple Cross-Site Scripting Vulnerabilities in the FirePass logon and activation pages
It is possible for a remote attacker to create web pages, emails, or other media containing hyperlinks to the vulnerable FirePass web pages. These hyperlinks may include executable code or other malicious data. Following one of these hyperlinks to the FirePass controller could result in...