JPM Article Script 6 - SQL Injection Vulnerability

Document Title: =============== JPM Article Script 6 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.comgetcontent.phpid=473 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID: ==================================== 473 Produc...

JPM Article Script 6 - SQL Injection Vulnerability

Document Title: =============== JPM Article Script 6 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.comgetcontent.phpid=473 Release Date: ============= 2012-03-14 Vulnerability Laboratory ID VL-ID: ==================================== 473 Produc...

Apple Releases Safari 5.1.4

Apple has released Safari 5.1.4 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, spoof a domain name, obtain sensitive information, or perform a cross-site scripting attack. US-CERT encourages users and administrators to review Apple...

ContaoCMS (aka TYPOlight) <= 2.11 CSRF (delete admin/delete articles)-vulnerability warning-the black bar safety net

Title: ContaoCMS aka TYPOlight = 2.11 CSRF Delete Admin - Delete Article Author: Ivano Binetti http://ivanobinetti.com Download address: http://www.contao.org/en/download.html The development of this website: http://www.contao.org Affects versions: 2.11.0 latestand earlier Test platform: Debian...

SMW+ 1.5.6 Cross Site Scripting

Exploit Title: SMW+ 1.5.6 Cross Site Scripting Date: 9.02.2012 Author: Sony Software Link:http://www.smwplus.com/index.php/SemanticMediaWikiPlus Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/smw-enterprise-wiki-156-cross-site.html...

Unfixed XSS vulnerability at www.gdn.edu

Security researcher JonStockton, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.gdn.edu, which at the time of submission ranked 487371 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is current...

Aspcms 1.5 COOKIES injection 0day and fix-vulnerability warning-the black bar safety net

Aspcms 1.5 COOKIES injection 0day, register an account. Then after landing to modify the COOKIES of USERID values In the back plus the injected statement: UNION SELECT 1,2,3,4,5,6,username,adminpassword,9,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2 from Aspcmsadmins Then edit the account...

Adapt CMS v2.0.1 - SQL Injection Vulnerability

Document Title: =============== Adapt CMS v2.0.1 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=341 Release Date: ============= 2011-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 341 Product ...

Apple Releases iTunes 10.5.1

Apple has released iTunes 10.5.1 to address a vulnerability. This vulnerability may allow an attacker to conduct a man-in-the-middle attack that could lead a user to click on a forged link believed to have originated from Apple. US-CERT encourages users and administrators to review Apple article...

CVE-2010-5037

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2010-5037

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

PT-2011-1972

Name of the Vulnerable Software and Affected Versions SenseSites CommonSense CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in the "article.php" file. Recommendations At the moment,...

Apple Releases QuickTime 7.7.1

Apple has released QuickTime 7.7.1 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain sensitive information. US-CERT encourages users and administrators to review Apple Support Article HT5016 a...

Wind noise dotNETCMS 0day-vulnerability warning-the black bar safety net

Brief description: File upload Detailed description: Vulnerability in the user page, the registered user. Article management, upload of.. Select the file name unchanged.... Upload 1. asp;,jpg And then you know Vulnerability to prove: ! ! !...

CVE-2010-4905

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...

Sql injection

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...

CVE-2010-4905

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...

CVE-2010-4905

CVE-2010-4905 : The vulnerability is a SQL injection in the Softbiz Article Directory Script, specifically in the file/article_details.php, exploitable via the sbiz_id parameter. The issue allows remote attackers to execute arbitrary SQL commands and is rated HIGH (CVSS v2 base score 7.5). Affect...

PT-2011-1840

Name of the Vulnerable Software and Affected Versions Softbiz Article Directory Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sbiz id parameter in the "article details.php" file. Recommendations For...

CVE-2010-4905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...