Fedora Update for php-Smarty FEDORA-2008-9401

Check for the Version of php-Smarty OpenVAS Vulnerability Test Fedora Update for php-Smarty FEDORA-2008-9401 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for Miro FEDORA-2008-1435

Check for the Version of Miro OpenVAS Vulnerability Test Fedora Update for Miro FEDORA-2008-1435 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Ewebeditor2.8.0最终版删除任意文件漏洞

eWebEditor是基于浏览器的、所见即所得的在线HTML编辑器。她能够在网页上实现许多桌面编辑软件（如：Word）所具有的强大可视编辑功能。WEB开发人员可以用她把传统的多行文本输入框TEXTAREA替换为可视化的富文本输入框，使最终用户可以可视化的发布HTML格式的网页内容。eWebEditor!已基本成为网站内容管理发布的必备工具！ 此漏洞存在于Example\NewsSystem目录下的delete.asp文件中，这是ewebeditor的测试页面，无须登陆可以直接进入，看这些代码： ‘ 把带”|”的字符串转为数组 Dim aSavePathFileName...

Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database Buffer Overflow in SYS.OLAPIMPLT.ODCITABLESTART January 29, 2009 Risk Level: High Affected versions: Oracle Database Server version 9iR2 Remote exploitable: Yes Authentication to Database Server is needed...

MetaBBS 0.11 - Administration Settings Authentication Bypass

MetaBBS 0.11 - Administration Settings Authentication Bypass source: https://www.securityfocus.com/bid/33626/info MetaBBS is prone to a vulnerability that lets attackers modify arbitrary user passwords because it fails to adequately secure access to administrative functionality. Exploiting this...

Synactic ALL_IN_THE_BOX File Overwrite

DSECRG-09-006 Synactis AllINTHEBOX ActiveX Control - Null byte File Owervrite Synactis AllINTHEBOX ActiveX Control ALLINTHEBOX.OCX can be used to owervrite any any file in target system. Vulnerable method is "SaveDoc" Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL:...

ASP-Dev XM Event Diary Multiple Vulnerabilities

The host is running ASP-Dev XM Events Diary and prone to multiple vulnerabilities. Vulnerabilities Insight: - Input passed to the 'cat' parameter in 'default.asp' and 'diaryviewC.asp' are not properly sanitised before being used in SQL queries. - Insufficient access control to the database file...

Sad Raven Guetbook 1.1 passwd.dat Disclosure

!/usr/bin/python Portal Name: Sad Raven's Guestbook version: 1.1 Google Dork: sad Raven's Guestbook Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me: [email protected] import urllib import sys import parser serv="http://" i=0 for arg in sys.argv: i=i+1 if i!=3: pri...

Joomla com_pcchess (game_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Joomla compcchess gameid Blind SQL Injection Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: SQL injection, DoS...

DMXReady Secure Document Library 1.1 SQL Injection

Title : DMXReady Secure Document Library http://target/path/applications/SecureDocumentLibrary/incsecuredocumentlibrary.asp Edit - http://target/path/admin/SecureDocumentLibrary/MembersAreaManager/components/CategoryManager/uploadimagecategory.asp?cid= SQL Inject Example: USERNAME-...

Masir Camp 3.0 - 'SearchKeywords' SQL Injection

source: https://www.securityfocus.com/bid/33309/info Masir Camp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

TOR Privilege Escalation Vulnerability - Windows

TOR is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpList cline Parameter Array Remote File Inclusion

The version of phpList installed on the remote host fails to filter user input to the 'clinec' parameter before passing it to a PHP 'include' function in 'admin/index.php'. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker can exploit this issue to view arbitrary files on...

GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-18 JasPer: User-assisted execution of arbitrary code Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer overflows might allow for insufficient memory allocation, leading...

Active Web Mail v 4 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Active Web Mail v 4 Auth Bypass Remote SQL Injection Vulnerability ==================================================================== Tybe:Auth Bypass Remote SQL...

ocean12poll-sql.txt

Application: Ocean12 Poll Manager Pro Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 Poll Manager Pro SQL Injection Exploitation: Remote Google Dork: "Maintained with the Ocean12 Poll Manager Pro" Example...

Ruby on Rails redirect_to() HTTP Header Injection Vulnerability - Linux

The host is running Ruby on Rails, which is prone to HTTP Header Injection Vulnerability. OpenVAS Vulnerability Test $Id: gbrubyrailshttpheaderinjvulnlin.nasl 4227 2016-10-07 05:45:35Z teissa $ Ruby on Rails redirectto HTTP Header Injection Vulnerability - Linux Authors: Veerendra GG Copyright:...

WebStudio CMS (index.php pageid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== WebStudio CMS index.php pageid Blind SQL Injection Vulnerability ================================================================== Application: WebStudio CMS Bug Type:...

Pilot Group PG Roommate Finder Solution - SQL Injection

Pilot Group PG Roommate Finder Solution - SQL Injection source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...