Manis Admin Plugin - Remote Denial of Service

Manis Admin Plugin - Remote Denial of Service source: https://www.securityfocus.com/bid/34685/info Mani's Admin Plugin is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. alias...

WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection

WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...

AdaptBB Multiple Input Validation Vulnerabilities

AdaptBB is prone to multiple security vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, an arbitrary-file-upload issue, and an arbitrary-command-execution issue. Exploiting these issues can allow an attacker t...

AdaptBB Multiple Input Validation Vulnerabilities

AdaptBB is prone to multiple security vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, an arbitrary-file-upload issue, and an arbitrary-command-execution issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some...

LinPHA 1.3.4 Multiple Cross-Site Scripting Vulnerabilities

LinPHA is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:linpha:linpha";...

CVE-2008-6629

CVE-2008-6629: XSS in WEBBDOMAIN Multi Languages WebShop Online 1.02 (detail.php) via the name parameter. The vulnerability arises from unsanitized input in a detail.php parameter, enabling remote script/HTML injection. Affected software is briefly identified as WEBBDOMAIN Multi Languages WebShop...

JobHut 'browse.php' SQL Injection Vulnerability

JobHut is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

Community CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...

HP unveils Flash vulnerability scanner

HP has released a free static-analysis tool designed to find vulnerabilities in applications developed on the Adobe Flash platform. But HP SWFScan is no security geek plaything. It’s meant specifically for developers without much in the way of security training. The tool is the brainchild of the...

CVE-2009-0583

CVE-2009-0583 is a vulnerability in Ghostscript’s ICC library (icclib) affecting Ghostscript 8.64 and earlier (and Argyll CMS 1.0.3 and earlier). The issue is multiple integer overflows in icc.c that enable a context-dependent attacker to trigger a heap-based buffer overflow, crash the applicatio...

WEBJump! Multiple SQL Injection Vulnerabilities

WEBJump! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Bugs Online 'help.asp' SQL Injection Vulnerability

Bugs Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Kim Websites 1.0 - Authentication Bypass

Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team & all hackerz greetz:to my best frien...

CVE-2009-0860

CVE-2009-0860: XSS in the web UI of NetMRI 3.0.1 and earlier, related to error pages. The vulnerability is in the login application’s web interface, allowing remote script/HTML injection via unspecified vectors. CVSS v2 base score 4.3 (Medium) with network attack vector, require no authentication...

nForum Multiple SQL Injection Vulnerabilities

nForum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

A recap of the 2nd OWASP conference

The second Open Web Application Security Project OWASP Conference held on the Gold Coast is regarded as the leading Web Application Security conference within the Asia Pacific region attracting both Australian and overseas speakers and attendees. The conference continued its community atmosphere...

RedHat Security Advisory RHSA-2009:0340

The remote host is missing updates announced in advisory RHSA-2009:0340. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A flaw was discovered in libpng that could result in libpng trying to free random memory if...

Zabbix 1.6.2 Frontend - Multiple Vulnerabilities

Zabbix 1.6.2 Frontend Multiple Vulnerabilities Name Multiple Vulnerabilities in Zabbix Frontend Systems Affected Zabbix 1.6.2 and possibly earlier versions Severity High Impact CVSSv2 High 9.7/10, vector: AV:N/AC:L/Au:N/C:P/I:C/A:C Vendor http://www.zabbix.com/ Advisory...

lastRSS autoposting bot MOD 0.1.3 - 'phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/33843/info lastRSS autoposting bot MOD is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP co...