CVE-2011-0447

Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged 1 AJAX or 2 API requests that...

CVE-2011-0696

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX requests that leverage a "combination of browser plugins...

PHPOK3 business website built Station program injection-vulnerability warning-the black bar safety net

Author: jsbug original: http://lcx.cc/?FoxNews=1077.html Friends always stepping on my body to embark on DOTA Super God of the road, see the forum someone said phpok, taking advantage of the weekend, send on the head a gold, hope you can also be super-God. “phpok3/app/www/models/upfile.php”: the...

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

Joomla! Component JE Auto - Local File Inclusion

Joomla! Component JE Auto - Local File Inclusion Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla Component com_jeauto LFI Vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comjeauto LFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /...

CVE-2010-4365

SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...

Sql injection

SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...

CVE-2010-4365

CVE-2010-4365 concerns an SQL injection in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar). The vulnerability stems from unsafely handling the event_id parameter in the alleventlist_more action to index.php, allowing remote attackers to craft input that could modify or disc...

CVE-2010-4365

SQL injection vulnerability in JE Ajax Event Calendar comjeajaxeventcalendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an alleventlistmore action to index.php...

Pandora FMS <= 3.1 Mullti Vulnerability

Exploit for php platform in category web applications ======================================= Pandora FMS = 3.1 Mullti Vulnerability ======================================= Path Traversal: PHP File Inclusion or RFI/LFI: Remote/Local file inclusion - CVE-2010-4281 -CVE-2010-4282 - CVSS 8.5/10...

Joomla JE Ajax Event Component com_jeajaxeventcalendar SQL Injection

Exploit for php platform in category web applications ====================================================================== Joomla JE Ajax Event Component comjeajaxeventcalendar SQL Injection ====================================================================== Vendor:...

Joomla! Component JE Ajax Event Calendar - SQL Injection

Joomla! Component JE Ajax Event Calendar - SQL Injection Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110 Author: altbta Contact: l9atHotmailDotcom Home:...

Joomla JE Ajax Event Calendar SQL Injection

Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110 Author: altbta Contact: l9atHotmailDotcom Home: http://xp10.com Thanks to: rxh xp10.com v4-team.com p0c.cc :...

Joomla! Component JE Ajax Event Calendar - SQL Injection

Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110 Author: altbta Contact: l9atHotmailDotcom Home: http://xp10.com Thanks to: rxh xp10.com v4-team.com p0c.cc :...

Ajax Onlineshop SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Ajax Onlineshop SQL Injection Vulnerability =========================================== Exploit Title: Ajax Onlineshop Date: 22/11/2010 Author: TA4G - email protected Location: Algeria Vendor:...

Vulnerability in Google AJAX Search

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in Google AJAX Search. In 2007 I already wrote about vulnerability in Google Custom Search Engine http://websecurity.com.ua/1050/ - CVE-2007-3484 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3484, and this is n...

BPRealestate Real Estate Authentication Bypass Vulnerability

Exploit for asp platform in category web applications ============================================================ BPRealestate Real Estate Authentication Bypass Vulnerability ============================================================ Author : v3n0m Site : http://yogyacarderlink.web.id/ Date :...

BPRealestate Real Estate - Authentication Bypass

BPRealestate Real Estate - Authentication Bypass / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

BPRealestate Real Estate SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...