2190 matches found
CVE-2014-10001
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 conduct cross-site scripting XSS attacks via the i18n1name parameter in a pjActionCreate action to the...
CVE-2014-10001
CVE-2014-10001 affects PHPJabbers Appointment Scheduler 2.0. The vulnerability set consists of CSRF flaws that enable an attacker to hijack administrator sessions for requests crafted to the application, including (1) XSS via the i18n[1][name] parameter in a pjActionCreate action targeting the pj...
CVE-2014-10010
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter in a pjActionDownload action to the pjBackup controller...
Js-appointment <= 1.5 - SQL Injection
The Js-appointment WordPress plugin was affected by a SQL Injection security vulnerability...
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
No description provided by source. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Appointment Booking Pro Joomla Component LFI Vulnerability
No description provided by source. Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / /...
joomla component appointinator 1.0.1 - Multiple Vulnerabilities
No description provided by source. Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...
WordPress Js-appointment plugin <= 1.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Js-appointment plugin = 1.5 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/js-appointment.1.5.zip Version: 1.5 tested Note:...
WordPress Appointment Scheduler Plugin <= 1.5 - XSS
Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...
PHPJabbers Appointment Scheduler 2.0多个漏洞
No description provided by source. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/appointment-scheduler/ === Exploit === 1...
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
Appointment Scheduler version 2.0 suffers from file disclosure, cross site request forgery, and cross site scripting vulnerabilities. Appointment Scheduler V2.0 - Multiple Vulnerabilities ========================================================================= .:. Author : HackXBack .:. Contact ...
Scientific Linux Security Update : evolution on SL6.x i386/x86_64 (20130221)
The way Evolution handled mailto URLs allowed any file to be attached to the new message. This could lead to information disclosure if the user did not notice the attached file before sending the message. With this update, mailto URLs cannot be used to attach certain files, such as hidden files o...
WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Js-appointment plugin = 1.5 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/js-appointment.1.5.zip Version: 1.5 tested Note:...
WordPress JS-Appointment 1.5 SQL Injection
Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv': requireoncePLUGINPATHALLBOOK."/libs/class.book.php"; $settings =...
WordPress Js-Appointment Plugin <= 1.5 - SQL Injection
Js-Appointment plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress Plugin Js-appointment 1.5 - SQL Injection
Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv': requireoncePLUGINPATHALLBOOK."/libs/class.book.php"; $settings =...
WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Js-appointment plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if !empty$REQUEST'searchaction' switch$REQUEST'searchaction' case 'searchadv':...
Steve Jobs Resigns as Apple CEO
Steve Jobs Resigns as Apple CEO Steve Jobs has resigned as chief executive officer of Apple AAPL. The company has promoted chief operating officer Tim Cook to the position of CEO and said that Cook will join the company's board of directors. Jobs will become Apple's chairman. Here is a copy of...