2611 matches found
Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell FIRSTBORN Movie-Addon | Site : www.firstborn.de | Price...
Slack: CSRF on add comment section
Hi, Steps to repro: 1 Go to this link https://sehacure.slack.com/help/requests/237956 2 The malicious guy should now the request number and the username. 3 Open Tamper data using tamper data firefox addon,Fill the reply in the form. 4 Submit the request.You will see there are no anti-csrf token i...
Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure
The Nagios Looking Glass Addon for Nagios installed on the remote host is affected by a file disclosure vulnerability. By sending a specially crafted request to the Addon's 'server/s3download.php' script, a remote, unauthenticated attacker can leverage this vulnerability to obtain the contents of...
Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability
Document Title: =============== Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================== 1119 Common Vulnerability Scoring System: ==================================== 3.8 Product &...
Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection
Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...
Woltlab Burning Board FLVideo Addon - video.php?value SQL Injection
Woltlab Burning Board FLVideo Addon - video.php?value SQL Injection Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVide...
Woltlab Burning Board FLVideo Addon SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVideo Addon for WB...
Woltlab Burning Board FLVideo Addon - 'video.php?value' SQL Injection
Exploit Title: Woltlab Burning Board FLVideo Addon SQL Injection flvideo.php Exploit Google Dork: inurl:flvideo.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Vendor Homepage: http://www.flvideo.de/ Version: FLVideo Addon for WBB © 2007 by Danny König Tested on: Windows8/Backtrack...
[SECURITY] Fedora 19 Update: node-gyp-0.10.6-1.fc19
node-gyp is a cross-platform command-line tool written in Node.js for compi ling native addon modules for Node.js, which takes away the pain of dealing with the various differences in build platforms. It is the replacement to the node-w af program which is removed for node v0.8...
[SECURITY] Fedora 18 Update: node-gyp-0.10.6-1.fc18
node-gyp is a cross-platform command-line tool written in Node.js for compi ling native addon modules for Node.js, which takes away the pain of dealing with the various differences in build platforms. It is the replacement to the node-w af program which is removed for node v0.8...
Responsive Article Directory Script Shell Upload Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
DEBIAN-CVE-2012-6112
classes/GoogleSpell.php in the PHP Spellchecker aka Google Spellchecker addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote...
CVE-2012-6112
classes/GoogleSpell.php in the PHP Spellchecker aka Google Spellchecker addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote...
CVE-2012-6112
classes/GoogleSpell.php in the PHP Spellchecker aka Google Spellchecker addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote...
miniBB 3.x Addon preview Remote File Include Vulnerability
Exploit for php platform in category web applications Exploit Title: miniBB 3.x Addon preview Remote File Include Vulnerability Date: 2013-01-27 Author: bd0rk Vendor or Software Link: http://www.minibb.com/download.php?file=minibbpluginpreview Version: for miniBB 3.x Category:: web applications...
WebsiteBaker Addon Concert Calendar 2.1.4 - Multiple Vulnerabilities
WebsiteBaker Addon Concert Calendar 2.1.4 - Multiple Vulnerabilities Advisory: Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability Advisory ID: SSCHADV2013-001 Author: Stefan Schurtz Affected Software: Successfully tested on Concert Calendar 2.1.4 Vendor URL:...
CVE-2012-5000
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
Sql injection
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
CVE-2012-5000
CVE-2012-5000 describes an SQL injection in jokes/index.php of the Witze addon 0.9 for deV!L'z Clanportal. The vulnerability arises from unsafely handling the id parameter in the show action, enabling remote attackers to inject and execute arbitrary SQL commands. Impact details in the provided da...
