5317 matches found
Joomla! Component com_hospital - SQL Injection
source: https://www.securityfocus.com/bid/48689/info The 'comhospital' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
AJ Classifieds - listingid SQL Injection
AJ Classifieds - listingid SQL Injection source: https://www.securityfocus.com/bid/48702/info AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Pandora Fms 3.2.1 - Cross-Site Request Forgery
Exploit Title: Pandora FMS v3.2.1 Cross Site Request Forgery Google Dork: intitle:"Pandora FMS - the Flexible Monitoring System" intext:"Your IP" Date: 12-07-2011 Author: Mehdi Boukazoula Software Link: http://pandorafms.org/ Version: v 3.2.1 Tested on: v = Pandora XSRF exploit Click submit input...
Gilnet News - read_more.php SQL Injection
Gilnet News - readmore.php SQL Injection source: https://www.securityfocus.com/bid/48966/info Gilnet News is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Sony Hiring Information Security Engineers & Facebook Hire George Hotz
Sony Hiring Information Security Engineers After 14 Hacks, Finally Sony open job recruitment for "Sr Application Security Analyst ". Sony Estimates 171 Million Dollar Loss due to PSN Hack. Also Sony CEO sorry for PSN hack, offers data theft insurance. Social network Facebook has hired a computer...
Sony Hiring Information Security Engineers & Facebook Hire George Hotz
Sony Hiring Information Security Engineers After 14 Hacks, Finally Sony open job recruitment for "Sr Application Security Analyst". Sony Estimates 171 Million Dollar Loss due to PSN Hack. Also Sony CEO sorry for PSN hack, offers data theft insurance. Social network Facebook has hired a computer...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Nibbleblog 3 - Multiple SQL Injections
Nibbleblog 3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48339/info Nibbleblog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...
Tele Data Contact Management Server Directory Traversal Vulnerability
The host is running Tele Data Contact Management Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbteledatacontactmanagementserverdirtravvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Tele Data Contact Management Server Directory Traversal Vulnerability...
Oracle HTTP Server XSS Header Injection
Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...
9 9 5 9 shop system v5. 0 Blind SQL injection-vulnerability warning-the black bar safety net
Author: stuffy bean ? php printr' +---------------------------------------------------------------------------+ 9 9 5 9 shop system v5. 0 Blind SQL injection exploit by mendou Official website: www.9959shop.com +---------------------------------------------------------------------------+ '; if...
AlegroCart <= 1.2. x (category_next) blind defect and repair-vulnerability warning-the black bar safety net
Title : AlegroCart = 1.2. x categorynext Blind SQL Injection Vulnerability Author : KedAns-Dz E-mail : [email protected] [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -0 0 2 1 3 5 5 5 2 4 8 7 0 1 Web Site : www.1337day.com www.exploit-id.com www.09exploit.com Twitte...
ApPHP Shopping Cart <= XSRF (Change Admin Password)
Exploit for php platform in category web applications ================================================================================= . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web...
Gadu-Gadu 10.5 - Remote Code Execution
Gadu-Gadu 10.5 - Remote Code Execution source: https://www.securityfocus.com/bid/48030/info Gadu-Gadu is prone to a remote code-execution vulnerability. Successful exploits will allow remote attackers to execute arbitrary code within the context of the affected application. Gadu-Gadu 10.5 is...
Joomla! Component com_shop - SQL Injection
source: https://www.securityfocus.com/bid/47971/info The 'comshop' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework
Arachni v.0.2.3 - Open Source Web Application Security Scanner Framework Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.Arachni is smart, it trains itself by learning from...
Mozilla Products Multiple Vulnerabilities May-11 (Windows)
The host is installed with Mozilla Firefox or Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwinmay11.nasl 7015 2017-08-28 11:51:24Z teissa $ Mozilla Products Multiple Vulnerabilities May-11 Windows Authors: Sooraj KS Copyright: Copyright...
EmbryoCore 1.03 - index.php SQL Injection
EmbryoCore 1.03 - index.php SQL Injection source: https://www.securityfocus.com/bid/47763/info EmbryoCore is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Deal Informer 4.8.0 Cross Site Scripting
Product: DEAL INFORMER Vendor: http://www.got.my http://www.got.my/DEAL-INFORMER/ Vulnerable Version: 4.8.0 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...