CVE-2012-5480

The Moodle Database activity module (versions 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3) allows remote attackers to bypass restrictions on reading other participants’ entries via an advanced search, resulting in information disclosure. Root cause: insufficient enforcement of ...

CVE-2012-5473

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search...

CVE-2012-5480

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search...

[SECURITY] Fedora 17 Update: phpldapadmin-1.2.2-3.gitbbedf1.fc17

PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...

Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Document Title: =============== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=700 Release Date: ============= 2012-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 700...

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

UBUNTU-CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

CVE-2012-3398

CVE-2012-3398 describes an algorithmic complexity DoS in Moodle. The vulnerability affects Moodle releases: 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4. It arises when remote authenticated users use the advanced-search on a highly populated database, causi...

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities

Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

CVE-2010-4947

Cross-site scripting XSS vulnerability in advancedsearchresult.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

Kunena < 1.5.13, < 1.6.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done...

T-Dreams Job Seekers Package 3.0 - SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

T-Dreams Job Seekers Package 3.0 SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Demo Link:http://t-dreams.com/demo/jobcareerV3 Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to...

T-Dreams Job Seekers Package 3.0 - SQL Injection

T-Dreams Job Seekers Package 3.0 - SQL Injection Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Sql injection

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

CVE-2010-2686

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

SAP&#39;s web module OLK SQL Injection vulnerability

SAP's web module OLK: SQL Injection $ Author: salcho - [email protected] $ Home : CSL Labs $ Date : 27/06/2010 $ + Vendor : http://www.topmanage.com.pa/ + Product : http://www.topmanage.com.pa/products/1/ + Version : 1.91.30 Prior versions might be vulnerable too. + Dork : inurl: /olk/cp...

SAP Web Module OLK SQL Injection

SAP's web module OLK: SQL Injection $ Author: salcho - [email protected] $ Home : CSL Labs $ Date : 27/06/2010 $ + Vendor : http://www.topmanage.com.pa/ + Product : http://www.topmanage.com.pa/products/1/ + Version : 1.91.30 + Dork : inurl: /olk/cp $DISCLAIMER The author does not take any...