UBUNTU-CVE-2010-0288

A typo in the administrator permission check in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...

Ajax Manset Haber Sistemi 3 Administrative Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...

dokuwiki 2009-12-25 - Multiple Vulnerabilities

Reported: 13-01-2010 Patched: 13-01-2010 Released: 14-01-2010 Vulnerable version : http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25.tgz Patched version: http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25b.tgz Author: whitesheep Contact: [email protected]...

Max's AJAX File Uploader Shell Upload

| | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell yourshell.php | | 2- Pwd Your Shell...

Maxs AJAX File Uploader Remote File Upload Vulnerability

No description provided by source. | | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell...

Maxs AJAX File Uploader - Arbitrary File Upload

Maxs AJAX File Uploader - Arbitrary File Upload | | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your She...

Maxs AJAX File Uploader Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== Maxs AJAX File Uploader Remote File Upload Vulnerability ======================================================== | | Max's AJAX File Uploader Remote File Upload Vulnerability | |...

Maxs AJAX File Uploader - Arbitrary File Upload

| | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell yourshell.php | | 2- Pwd Your Shell...

CVE-2009-4089

Telepark.wiki versions 2.4.23 and earlier are affected. Affected component: ajax/deletePage.php (modified pageID) allows deletion of arbitrary pages; ajax/deleteComment.php (modified pageID) allows deletion of arbitrary comments. Root cause: insufficient access control in Telepark.wiki web endpoi...

CVE-2009-4089

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and 1 delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or 2 delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php...

CVE-2009-4090

CVE-2009-4090 affects Telepark.wiki prior to or equal to 2.4.23. The flaw is an unrestricted file upload in ajax/addComment.php that allows an attacker to upload a file with a NULL byte in the name, enabling remote code execution. Multiple connected sources (NVD entry, OpenVAS NASL, CVE mirrors) ...

Telepark Wiki 2.4.23 XSS / Code Execution

Abysssec Inc Public Advisory Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version : ",$POST'wikiFileName',strfileuploaded.".\n"; for bypass you can use : image.jpg%00.php note : use group variable for changing directory to another writeable directory FIXED: line 22: if...

Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities ===================================================== Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version :...

Prototype JavaScript Framework跨站Ajax请求漏洞

Bugraq ID: 36926 CVE ID：CVE-2008-7220 Prototype JavaScript Framework是一款由Sam Stephenson开发的JavaScript开发函数库及框架。它提供了完整的Ajax框架及其它的工具。 Prototype JavaScript Framework存在一个未明错误，远程攻击者可以利用漏洞进行一个跨站ajax请求攻击，可以以受影响浏览器安全上下文执行任意代码。 Asterisk包含一个基于AJAX的演示管理接口，ajamdemo.html使用prototype.js框架，受此漏洞影响允许攻击者执行跨站AJAX请求攻击。...

Portili Personal And Team Wiki Disclosure / XSS / Execution

Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact : 10/4/2009 Vendor Response : 11/4/2009 Vendor Response : i have...

AST-2009-009: Cross-site AJAX request vulnerability

Asterisk Project Security Advisory - AST-2009-009 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Cross-site AJAX request vulnerability |...

CVE-2009-3822

PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...

Remote file inclusion

PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat comajaxchat component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter to tests/ajcuser.php...

CVE-2009-3822

CVE-2009-3822 affects Fiji Web Design Ajax Chat (com_ajaxchat) 1.0 for Joomla!, where a PHP remote file inclusion flaw allows an attacker to run arbitrary PHP code by supplying a URL in the GLOBALS[mosConfig_absolute_path] parameter to tests/ajcuser.php. The connected sources corroborate the same...