Yellow Swordfish Simple Forum 1.101.11 - topic SQL Injection

Yellow Swordfish Simple Forum 1.101.11 - topic SQL Injection source: https://www.securityfocus.com/bid/27823/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Cisco Unified Communications Manager 6.1 - key SQL Injection

Cisco Unified Communications Manager 6.1 - key SQL Injection source: https://www.securityfocus.com/bid/27775/info Cisco Unified Communications Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities

JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.” Tested versions: JSPWiki v2.4.104...

Joomla! / Mambo Component com_omnirealestate - 'objid' SQL Injection

source: https://www.securityfocus.com/bid/27783/info The 'comomnirealestate' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

okul siteleri com_mezun Component - SQL Injection

okul siteleri commezun Component - SQL Injection source: https://www.securityfocus.com/bid/27755/info 'okul siteleri' is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Cacti 0.8.7 - 'graph_view.php?filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27749/info Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these...

Rapid-Source Rapid-Recipe Component - Multiple SQL Injections

Rapid-Source Rapid-Recipe Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/27724/info Rapid-Recipe is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

VWar 1.5 - 'calendar.php' SQL Injection

source: https://www.securityfocus.com/bid/27722/info VWar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or...

iPhoto < 7.1.2 Format String Vulnerability

The remote host is running a version of iPhoto 7.1 older than version 7.1.2. Such versions are reportedly affected by a format string vulnerability. If an attacker can trick a user on the affected host into subscribing to a specially crafted photocast, these issues could be leveraged to execute...

Portail Web PHP 2.5.1 - 'login.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Cross site scripting

Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...

PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection source: https://www.securityfocus.com/bid/27518/info YeSiL KoRiDoR Ziyaretçi Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Magic applications like Server vulnerability-vulnerability warning-the black bar safety net

Author: kEvin198... article source: hacker Defense Shortly before I often go to a music website suddenly announced the indefinite closure,but reserved for VIPs download right. This message is for the avid music lovers as a Thunderbolt. But there is no way,someone else's Station not shut off is...

Joomla! / Mambo Component com_buslicense - 'aid' SQL Injection

source: https://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

f5asm-xss.txt

F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...

F5 BIG-IP Web Management ASM Security Report XSS

F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...

Aconon Mail 2004 - Directory Traversal

Aconon Mail 2004 - Directory Traversal Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a...

PacerCMS 0.6 - id Multiple SQL Injections

PacerCMS 0.6 - id Multiple SQL Injections source: https://www.securityfocus.com/bid/27397/info PacerCMS is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

PacerCMS 0.6 - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27397/info PacerCMS is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, acces...