4227 matches found
IBM 1754 GCM 1.18.0.22011 - Remote Command Execution
No description provided by source. I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability...
php MBB cms 004 - Multiple Vulnerabilities
No description provided by source. MBB CMS = 004 LFI/SQLi Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script http://sourceforge.net/projects/phpmbbcms/ Tested : Windows / Linux Dork : N/A LFI MBBCMS/index.php ....... 22 ifisset$GET'mod' 23 $a=$GET'mod'; 24 switch$a 25 case $a: 26...
Joomla Front-End Article Manager System Upload Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Front-End Article Manager System Upload Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...
Article Dashboard 'admin/login.php' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27286/info Article Dashboard is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Article Management System 2.1.2 Reinstall Vulnerability
No description provided by source...
Inout Article Base Ultimate Shell Upload Vulnerabilty
No description provided by source. ============================================================== Inout Article base Ultimate Shell upload Vulnerabilty ============================================================== Name : Inout Article base Ultimate Shell upload Vulnerabilty Date : july 9,2010...
Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class VivvoArticleManagerRemoteFileIncludePOCBase: vulID = '63958' version = '1' vulDate = '2006-09-09' author ...
Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability
No description provided by source. MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query=SELECT from tblArticles where id=$aid; securesql functio...
Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability
No description provided by source. Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...
RV Article Publisher CSRF Vulnerability
No description provided by source. Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...
Power System Of Article Management 3.0 - (DD/XSS) Vulnerabilities
No description provided by source. --------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...
Softbiz Article Directory Script (sbiz_id) Blind SQL Injection Vulnerability
No description provided by source. =========================================================== Title: Article Directory sbizid Blind SQL Injection Vuln Script: Article Directory Price: $65 Link: http://www.softbizscripts.com/article-management-script.php...
WordPress iCopyright(R) Article Tools plugin <= 1.1.4 - SQL Injection
No description provided by source. Exploit Title: WordPress iCopyrightR Article Tools plugin = 1.1.4 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/copyright-licensing-tools.zip...
Article Friendly CSRF Vulnerability
No description provided by source. ======================================================================= Article friendly CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected]...
DUware DUportal 3.4.3 Pro Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14029/info DUportal Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...
AJ Article Persistent XSS Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r...
Omnistar Article Manager Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...
ContaoCMS (aka TYPOlight) <= 2.11 CSRF (Delete Admin - Delete Article)
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin- Delete Article Date : 25-02-2012 Author : Ivano Binetti...
ZeroCMS 1.0 - 'zero_transact_article.php' SQL Injection
ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE: CVE-2014-4194 Date: 20/06/2014...
PT-2014-5686
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in the zero view article.php file. Recommendations For ZeroCMS version 1.0, consider restricting...