CVE-2010-2535

Multiple cross-site scripting XSS vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens...

LM Starmail Paidmail SQLi and RFI Vulnerabilities

LM Starmail Paidmail is prone to SQL injection SQLi and remote file inclusion RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TYPO3 Back-end 'index.php' 'redirect_url' Redirect

The installed version of TYPO3 fails to validate input passed to the 'redirecturl' parameter of the back-end 'index.php' script before issuing a redirect. An attacker can exploit this issue to conduct phishing attacks by tricking users into visiting malicious websites. The installed version is al...

CVE-2010-2772

CVE-2010-2772 affects Siemens SIMATIC WinCC and SIMATIC PCS 7: a security bypass via default hard-coded SQL credentials allows remote attackers to access the backend database with administrative-like access. The vulnerability is tied to use of default credentials in the WinCC SQL server, permitti...

CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568...

Joomla Component com_mls_teams Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component commlsteams Persistent XSS Vulnerability ===========================================================...

CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568. Recent assessments: Assessed Attacker...

cyask system background Getshell vulnerabilities-vulnerability warning-the black bar safety net

cyask will set the parameters to the write cache, the write cache when removed from the database unfiltered data directly to write the file, resulting in can get webshell Analysis: admin/settingmanage. php file: ? php adminfooter; exit; elseif$adminaction=='settingedit' ifisset$POST'editsubmit'...

Joomla Component JE Story Submit SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com...

Joomla JE Story 1.4 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Joomla! Component jesubmit 1.4 - SQL Injection

Joomla! Component jesubmit 1.4 - SQL Injection Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team...

Important: Red Hat Security Advisory: rhev-hypervisor security, bug fix, and enhancement update

An updated rhev-hypervisor package that fixes two security issues, multiple bugs, and adds enhancements is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

Task Freak 'loadByKey()' SQL Injection Vulnerability

This host is running Task Freak and is prone SQL Injection Vulnerability. OpenVAS Vulnerability Test $Id: secpodtaskfreaksqlinjvuln.nasl 5838 2017-04-03 10:26:36Z cfi $ Task Freak 'loadByKey' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod, http://www.secpod.com...

Sablog-X V2. X admin permissions spoofing and arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

Sablog-X is a PHP and MySQL build a blog system. Affected version:Sablog-X-2. x Said First admin permission spoofing vulnerability Due to the Sablog-x v2. x the back-end authentication process there is a serious logical problem, and leads to the special structure of the cookie log in directly to...

Zenoss Server Multiple Vulnerabilities

The host is running Zenoss Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzenossservmultvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Zenoss Server Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

Joomla! Component AutartiTarot - Directory Traversal

Joomla! Component AutartiTarot - Directory Traversal source: https://www.securityfocus.com/bid/38034/info The AutartiTarot component for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an...

Western Digital ODAY through the kill vulnerability-vulnerability warning-the black bar safety net

Western Digital ODAY through the kill vulnerability Speak directly to use of the method. In the registered members,“the applicant name in Chinese”here written on the "Chinese',utype='1 1 1 1 1 1"Note, does not include outside of the double quotation marks. Else as usual, and then register...

Days edge corporate website system ultimate back-end authentication flaws-vulnerability warning-the black bar safety net

Days edge corporate website system ultimate back-end authentication flaws This don't know is the author of leaving the back door or program negligence, see here code: seeion. asp if session"username""" then else response. write "alert'illegal operation, please do not try to invade the system, if...