PHP Address Book 4.0.x SQL Injection

-------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.X-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/php-addressbook/ --DOWNLOAD:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

Unrestricted file upload

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2009-1483

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Studio Lounge Address Book 2.5 (profile) Shell Upload Vulnerability

No description provided by source. Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file:...

Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa ...

Studio Lounge Address Book 2.5 Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7 Aflawa Kamikaz Wa4ri...

Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================== Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability ================================================================== Download:...

Studio Lounge Address Book 2.5 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7...

Studio Lounge Address Book 2.5 - Authentication Bypass

Studio Lounge Address Book 2.5 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home:...

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

Address Book 2.5 Shell Upload

Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file: upload-file.php The upload-file.php...

Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload

Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file: upload-file.php The upload-file.php...

Evolution Data Server ntlm_challenge()内存内容泄露漏洞

BUGTRAQ ID: 34109 CVECAN ID: CVE-2009-0582 Evolution Data Server为地址簿、日历事件等常见的桌面信息提供单一的服务器。 Evolution Data Server所捆绑的Camel库没有正确地处理NTLM SASL报文。在camel/camel-sasl-ntlm.c的ntlmchallenge函数中，没有对从type 2拷贝到type 3报文（客户端对服务器挑战的响应）的域字符串长度验证从服务器所接收到的剩余数据： 127 ntlmsetstring ret, NTLMRESPONSEDOMAINOFFSET, 128...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...

Sun Java System Communications Express [HTML Injection]

Hello, I have found a HTML Injection vulnerability in Sun Java™ System Communications Express, a web client that provides an integrated web-based communication and collaboration client to the Sun Java Communications Suite. It consists of three client modules - Calendar, Address Book, and Mail. He...

Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090311-cucmpab Revision 1.0 For Public Release 2009 March 11 1600 UTC GMT...

Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Fedora Update for sylpheed FEDORA-2007-1841

Check for the Version of sylpheed OpenVAS Vulnerability Test Fedora Update for sylpheed FEDORA-2007-1841 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...