Sql injection

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

Mail.ru: Нежелательная информация

Приветствую. Вариант обхода запрета просмотра админки http://bb.mail.ru/admin через фишку Drupal http://bb.mail.ru/?q=admin/ На мой взгляд, не критично, но можно и пофиксить =...

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the application's HTTP server...

CVE-2013-2715

Cross-site scripting XSS vulnerability in the admin view in the Search API searchapi module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name...

WordPress Plugin RSVPMaker 2.5.4 - Persistent Cross-Site Scripting

WordPress Plugin RSVPMaker 2.5.4 - Persistent Cross-Site Scripting Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS Date: 8/12/12 Exploit Author: Chris Kellum Vendor Homepage: http://rsvpmaker.com/ Software Link: http://downloads.wordpress.org/plugin/rsvpmaker.zip Version: 2.5.4...

CVE-2012-0914

The CVE-2012-0914 issue affects the Drupal Panels module: Panels 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 allow XSS via Region titles due to insufficient input sanitization. An attacker must have a role with the permission to administer panel layouts and be a remote authenticated user w...

Directory traversal

Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2008-3776

Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2008-3776

CVE-2008-3776 describes a directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2. The issue allows an attacker to read arbitrary files by supplying a .. (dot dot) sequence in the URI, enabling partial confidentiality impact. The provided documents specify the affected product and...

CVE-2008-3776

Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Fujitsu Web-Based Admin View目录遍历漏洞

BUGTRAQ ID: 30780 CNCAN ID：CNCAN-2008082204 Fujitsu Web-Based Admin View不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 提交包含多个"../"字符作为GET请求数据，可导致绕过WEB ROOT限制，以WEB权限查看系统文件内容。 Fujitsu Web-Based Admin View 2.1.2 目前没有解决方案提供： http://www.fujitsu.com/ GET /.././.././.././.././.././.././.././.././.././etc/passw...

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal source: https://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the...

Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal

source: https://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the application's HTTP server. Exploiting this issue will allow an...

CVE-2006-3327

Cross-site scripting XSS vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 sn20specialcases parameter "Special Cases" field in profile/mini.php, 2 tyxx01albumname parameter "Album Name" field in profile/photocreate.php, a...