CVE-2009-4878

Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via unknown attack vectors...

CVE-2009-4878

Technical details about CVE-2009-4878 are not provided in the supplied documents; no specifics on affected versions, root cause, or remediation are available. Monitor for updates.

Apache Axis2 crossite scripting

Crossite scripting via administration interface...

Cross site scripting

Cross-site scripting XSS vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages...

CVE-2010-2030

Cross-site scripting XSS vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages...

Apache Axis2 Administration Console - (Authenticated) Cross-Site Scripting

PR10-03 Authenticated Cross-Site Scripting Vulnerability XSS within Apache Axis2 administration console Source: http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-03 Advisory publicly released: Friday, 21 May 2010 Vulnerability found: Saturday, 30 January 2010 Severity level:...

WebJaxe 1.01 SQL Injection

Exploit Title: WebJaxe Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://media4.obspm.fr/outils/webjaxe/en/ Version: 1.01 Tested on: Win/Linux !You need a registred user! http://site/path/php/partieadministrateur/administration.php?page=projetcontribution&idcontribution=SQL...

McAfee Email Gateway - Web Administration Broken Access Control

McAfee Email Gateway - Web Administration Broken Access Control Advisory Name:Web Administration Broken Access Control in McAfee Email Gateway formerly IronMail Vulnerability Class: Broken Access Control Release Date: May 19, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected...

WebJaxe - SQL Injection

Exploit Title: WebJaxe Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://media4.obspm.fr/outils/webjaxe/en/ Version: 1.01 Tested on: Win/Linux !You need a registred user! http://site/path/php/partieadministrateur/administration.php?page=projetcontribution&idcontribution=SQL...

WebJaxe Sql Injection Vulnerability

Exploit for php platform in category web applications =================================== WebJaxe Sql Injection Vulnerability =================================== Exploit Title: WebJaxe Sql Injection Author: IHTeam Software Link: http://media4.obspm.fr/outils/webjaxe/en/ Version: 1.01 Tested on:...

EgO 0.7b - FCKeditor Arbitrary File Upload

EgO 0.7b - FCKeditor Arbitrary File Upload Title: EgO v0.7b fckeditor Remote File Upload Download: http://sourceforge.net/projects/vairux-ego/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

PointDev IDEAL Migration Buffer Overflow

$Id: idealmigrationipj.rb 9277 2010-05-11 00:24:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RHEL 5 : krb5 (RHSA-2010:0343)

Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

AVCON Buffer Overflow

Exploit for windows platform in category local exploits ===================== AVCON Buffer Overflow ===================== !/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE...

AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

CVE-2009-4828

CVE-2009-4828 describes a Cross-Site Request Forgery in Ad Manager Pro (AdManagerPro) 3.0, specifically in administration/admins.php, where an attacker can hijack the authentication of administrators to perform actions that create new administrative users via the admin_created action. The NVD ent...

Advanced Poll Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...

IDEAL Administration 2010 10.2 Buffer Overflow

!/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh, LPORT=4444 sc =...

IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================================= IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit ============================================================= !/usr/bin/env python IDEAL Administration 2010 v10.2...

2daybiz Advanced Poll Script XSS and Authentication Bypass

Exploit for php platform in category web applications ========================================================== 2daybiz Advanced Poll Script XSS and Authentication Bypass ========================================================== Description : Advanced Poll is a polling system with powerful...