WordPress Theme Archin 3.2 - Configuration Access

Exploit Title: Archin WordPress Theme Unauthenticated Configuration Access Date: Sept 29, 2012 Exploit Author: bwall @bwallHatesTwits Vendor Homepage: http://themeforest.net/user/wptitans Software Link: http://themeforest.net/item/archin-premium-wordpress-business-theme/239432 Version: 3.2 Tested...

Fedora Update for guacamole-ext FEDORA-2012-14179

Check for the Version of guacamole-ext OpenVAS Vulnerability Test Fedora Update for guacamole-ext FEDORA-2012-14179 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for libguac-client-vnc FEDORA-2012-14179

Check for the Version of libguac-client-vnc OpenVAS Vulnerability Test Fedora Update for libguac-client-vnc FEDORA-2012-14179 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 16 Update: guacd-0.6.1-3.fc16

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

[SECURITY] Fedora 17 Update: guacamole-common-0.6.1-2.fc17

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

[SECURITY] Fedora 17 Update: guacd-0.6.1-3.fc17

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...

Modoer. system of injection of several versions through the kill-vulnerability warning-the black bar safety net

Not to force the injection, to engage a station dig of, search it's a large station with this little impact on the issue to share learning, nonsense not say more, see our pork point First\core\modules\item\ajax. php start calling $do = trim$GET'do'; $op = trim$GET'op'; // allows the operating...

[SECURITY] Fedora 18 Update: guacamole-common-js-0.6.1-2.fc18

Guacamole is an HTML5 web application that provides access to desktop environments using remote desktop protocols such as VNC or RDP. A centraliz ed server acts as a tunnel and proxy, allowing access to multiple desktops thr ough a web browser. No plugins are needed: the client requires nothing...

Fedora Extras : mediawiki-1.8.3-7 (2007-005)

An XSS injection vulnerability was located in the AJAX support module, affecting MediaWiki 1.6.x and up when the optional setting $wgUseAjax is enabled. There is no danger in the default configuration, with $wgUseAjax off. - Tue Jan 9 2007 Axel Thimm - 1.8.3-7 - Update to 1.8.3. - Update fixes an...

CVE-2012-3373

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...

Cross site scripting

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...

CVE-2012-3373

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app...

DedeCMS 5.7 member/ajax_membergroup.php SQL注入漏洞

No description provided by source...

EasyWebTime V.2007 CMS SQL Injection

Exploit Title: EasyWebTime V.2007 CMS sql injection Google Dork: "Powered by EasyWebTime V.2007" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.bizpotential.com/main.php?filename=easywebtime Version: All Version Category:: webapps...

Globi CMS SQL Injection

Exploit Title: globi CMS SQL Injection Vulnerability Google Dork: "Powered by globi" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.globi.ca/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - wi...

Shadow infosystem CMS SQL Injection

Exploit Title: Shadow infosystem CMS sql injection Google Dork: "Powerd by Shadow infosystem" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.shadowinfosystem.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu ...

Synthetix CMS SQL Injection

Exploit Title: Synthetix CMS products.php SQL Injection Vulnerability Google Dork: "Website design & hosting by Synthetix" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.synthetix.com/ Version: All Version Category:: webapps Tested...

Jajitech IT Solutions CMS SQL Injection

Exploit Title: Jajitech IT Solutions CMS sql injection Google Dork: "Powered by Jajitech IT Solutions" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu...

Sichkg CMS SQL Injection

Exploit Title: sichkg CMS SQL Injection Vulnerability Google Dork: "Powered by sichkg.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.sichkg.com Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Serv...