[SECURITY] Fedora 17 Update: phpldapadmin-1.2.2-3.gitbbedf1.fc17

PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...

Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Document Title: =============== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=700 Release Date: ============= 2012-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 700...

CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

UBUNTU-CVE-2012-3398

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service CPU consumption by using the advanced-search feature on a database activity that has many records...

CVE-2012-3398

CVE-2012-3398 describes an algorithmic complexity DoS in Moodle. The vulnerability affects Moodle releases: 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4. It arises when remote authenticated users use the advanced-search on a highly populated database, causi...

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities

Wikidforum 2.10 - Advanced Search Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

CVE-2010-4947

Cross-site scripting XSS vulnerability in advancedsearchresult.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

Kunena < 1.5.13, < 1.6.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done...

T-Dreams Job Seekers Package 3.0 - SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

T-Dreams Job Seekers Package 3.0 SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Demo Link:http://t-dreams.com/demo/jobcareerV3 Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to...

T-Dreams Job Seekers Package 3.0 - SQL Injection

T-Dreams Job Seekers Package 3.0 - SQL Injection Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Sql injection

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

CVE-2010-2686

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

SAP&#39;s web module OLK SQL Injection vulnerability

SAP's web module OLK: SQL Injection $ Author: salcho - [email protected] $ Home : CSL Labs $ Date : 27/06/2010 $ + Vendor : http://www.topmanage.com.pa/ + Product : http://www.topmanage.com.pa/products/1/ + Version : 1.91.30 Prior versions might be vulnerable too. + Dork : inurl: /olk/cp...

SAP Web Module OLK SQL Injection

SAP's web module OLK: SQL Injection $ Author: salcho - [email protected] $ Home : CSL Labs $ Date : 27/06/2010 $ + Vendor : http://www.topmanage.com.pa/ + Product : http://www.topmanage.com.pa/products/1/ + Version : 1.91.30 + Dork : inurl: /olk/cp $DISCLAIMER The author does not take any...

DedeCms V5. 6 injection ODAY-vulnerability warning-the black bar safety net

Do not analyze it.. Directly to the use of the code plus/the advancedsearch. php? mid=1&sql=SELECT%2 0%20FROM%2 0%2 3@admin dede the password is a 3 2-bit MD5 minus the head 5, minus the tail seven, get 2 0 MD5 password method is the former minus 3 minus 1, Get 1 6-bit MD5...

Hotel / Resort Site Script with OnLine Reservation System - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: Internal system for tot...

Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...