CVE-2012-0396

EMC Documentum xPlore information disclosure (CVE-2012-0396) affects xPlore 1.0, 1.1 (before P07), and 1.2. The issue is that BROWSE permission is not properly enforced, allowing remote authenticated users to determine object existence or read certain metadata via a search, though they cannot ope...

ATutor 2.0.3 Multiple XSS vulnerabilities

Advisory: ATutor 2.0.3 Multiple XSS vulnerabilities Advisory ID: SSCHADV2012-002 Author: Stefan Schurtz Affected Software: Successfully tested on ATutor 2.0.3 Vendor URL: http://atutor.ca Vendor Status: informed ========================== Vulnerability Description ========================== ATuto...

Members of confluence-administrators group can browse to restricted pages

Expected behaviour is that a Confluence admin can view a page restricted to others by hitting the URL directly to help resolve any permission issues. In 3.5.x the admins can also browse to these pages via Browse Pages...

Members of confluence-administrators group can browse to restricted pages

Expected behaviour is that a Confluence admin can view a page restricted to others by hitting the URL directly to help resolve any permission issues. In 3.5.x the admins can also browse to these pages via Browse Pages...

[SECURITY] Fedora 14 Update: kphotoalbum-4.1.1-8.fc14

A photo album tool. Focuses on three key points: It must be easy to describe a number of images at a time. It must be easy to search for images. It must be easy to browse and View the images...

SoftXMLCMS Shell Upload Vulnerability

Exploit for asp platform in category web applications Exploit Title : softxmlcms Shell Upload Vulnerability Google Dork : Powered by softxmlcms Author : Alexander Software Link : http://www.softxml.com Test On : Windows/asp/php CVE : Web Applications === Exploit ===...

PHP Classified ads software (cid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == -Author: BorN To K!LL - h4ck3r -Contact: email protected == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample:...

Facebook Instant Search : Browse the Facebook Instantly like never before !!

Facebook Instant Search : Browse the Facebook Instantly like never before !! Browse the Facebook Instantly like never before !!. Search in your friends' posts, status, comments and much more... Visit to try it out: No registration required, Just type and search Link : News Source : Rohit Thakur...

Bs Scripts_Directory - SQL Injection Authentication Bypass

Bs ScriptsDirectory - SQL Injection Authentication Bypass 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

BROWSE CD SQL injection Vulnerability

Exploit for php platform in category web applications ===================================== BROWSE CD SQL injection Vulnerability ===================================== Author :: DrgPxX Group :: Aras cyber Army Email :: email protected Discover :: 27 june 2010 Critical Lvl :: M Publised :: 30 june...

SnowCade v3 SQL injection vulnerability-vulnerability warning-the black bar safety net

SnowCade v3 at presentSQL injectionattack vulnerability, can get administrator privileges http://127.0.0.1/index.php?action=browse&cat=injected statements http://127.0.0.1/index.php?action=playgame&gameid=injected statements http://127.0.0.1/index.php?action=browse&cat=injected statements Columns...

Snowcade 3 SQL Injection

/ - SnowCade v3 SQL Injection Vulnerability - ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://www.arcadecreate.com/ ---Demo : http://www.arcadecreate.com/demo/v3/snowcade/index.php - Vulnerability -...

SnowCade 3.0 - SQL Injection

SnowCade 3.0 - SQL Injection / - SnowCade v3 SQL Injection Vulnerability - ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://www.arcadecreate.com/ - Vulnerability - http://site.com/path/index.php?action=browse&cat=SQL INj...

SnowCade 3.0 - SQL Injection

/ - SnowCade v3 SQL Injection Vulnerability - ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://www.arcadecreate.com/ - Vulnerability - http://site.com/path/index.php?action=browse&cat=SQL INj...

Lyrics Script - SQL Injection / Cross-Site Scripting

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Lyrics Script SQL Injection and Cross-Site Scripting Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

RaakCMS Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================ RaakCMS Multiple Vulnerabilities ================================ Application Info: Name: RaakCms Vendor: http://raakcms.com Vulnerability: ======================= Arbitrary File Upload...

PonVFTP - Bypass Arbitrary File Upload

PonVFTP - Bypass Arbitrary File Upload in the name of allah Exploit Title: PonVFTP Bbypass Vulnerability Date: 15/1/2010 Author:S2K9 Site: www.soqor.net , www.xp10.me Software home: http://pongles.com/index.php Tested on: windows xp sp2 Dork :in u r dream exploit : press login username : admin...

Cacls mention the right to command-and-vulnerability warning-the black bar safety net

The Cacls command parameters: cacls.exe c: /e /t /g everyone:F put the c drive set to everyone can browse cacls.exe d: /e /t /g everyone:F The d drive set to everyone can browse cacls.exe e: /e /t /g everyone:F The e drive set to everyone can browse cacls.exe f: /e /t /g everyone:F The f drive is...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the 1 moduleid parameter in an admin/functionlist action, the 2 vendorid parameter in a vendor/vendorform action, the 3 moduleid parameter in an admin/moduleform actio...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action...