995 matches found
FreeBSD : codeigniter -- multiple vulnerabilities (f838dcb4-656f-11e5-9909-002590263bf5)
The CodeIgniter changelog reports : Security: The xorencode method in the Encrypt Class has been removed. The Encrypt Class now requires the Mcrypt extension to be installed. Security: The Session Library now uses HMAC authentication instead of a simple MD5 checksum. %NASLMINLEVEL 70300 C Tenable...
FreeBSD : codeigniter -- SQL injection vulnerability (5114cd11-6571-11e5-9909-002590263bf5)
The CodeIgniter changelog reports : Security: Fixed a SQL injection vulnerability in Active Record method offset. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacque...
codeigniter -- SQL injection vulnerability
The CodeIgniter changelog reports: Security: Fixed an SQL injection vulnerability in Active Record method offset...
Critical SQL injection bug in the ODBC database driver
More info at https://forum.codeigniter.com/thread-65803.html...
codeigniter -- mysql database driver vulnerability
The CodeIgniter changelog reports: Security: Removed a fallback to mysqlescapestring in the mysql database driver escapestr method when there's no active database connection...
Nakid CMS Cross-Site Request Forgery Vulnerability
Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a cross-site request forgery vulnerability. The vulnerability allows attackers to perform unauthorized operations...
Nakid CMS Local File Inclusion Vulnerability
Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a local file inclusion vulnerability that allows an attacker to read arbitrary files...
Nakid-CMS CSRF, Persistent XSS & LFI
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NAKIDCMS0611.txt Vendor: ================================ http://kilrizzy.github.io/Nakid-CMS/ Product: ================================ kilrizzy-Nakid-CMS-f274624 Nakid CMS is...
Nakid CMS - Multiple Vulnerabilities
Exploit Title: CSRF, Persistent XSS & LFI Google Dork: intitle: CSRF, Persistent XSS & LFI Date: 2015-06-11 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: kilrizzy.github.io/Nakid-CMS Software Link: kilrizzy.github.io/Nakid-CMS Version:...
Nakid CMS CSRF / XSS / Local File Inclusion
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NAKIDCMS0611.txt Vendor: ================================ http://kilrizzy.github.io/Nakid-CMS/ Product: ================================ kilrizzy-Nakid-CMS-f274624 Nakid CMS is...
Nakid CMS - Multiple Vulnerabilities
Nakid CMS - Multiple Vulnerabilities Exploit Title: CSRF, Persistent XSS & LFI Google Dork: intitle: CSRF, Persistent XSS & LFI Date: 2015-06-11 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: kilrizzy.github.io/Nakid-CMS Software Link:...
Nakid CMS CSRF / XSS / Local File Inclusion Vulnerability
Nakid CMS suffers from cross site request forgery, cross site scripting, and local file inclusion vulnerabilities. + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NAKIDCMS0611.txt Vendor: ================================...
codeigniter -- multiple vulnerabilities
The CodeIgniter changelog reports: Security: Added HTTP "Host" header character validation to prevent cache poisoning attacks when baseurl auto-detection is used. Security: Added FSCommand and seekSegmentTime to the "evil attributes" list in CISecurity::xssclean...
Seagate Business NAS - Remote Command Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class MetasploitModule 'Seagate Business NAS Unauthenticated Remote Command Execution', 'Description' = %q Some Seagate Busine...
Seagate Business NAS Unauthenticated Remote Command Execution Exploit
Some Seagate Business NAS devices are vulnerable to command execution via a local file include vulnerability hidden in the language parameter of the CodeIgniter session cookie. The vulnerability manifests in the way the language files are included in the code on the login page, and hence is open ...
Seagate NAS appears remote code execution vulnerability-vulnerability warning-the black bar safety net
Foreign security researcher OJ Reeves found the Seagate NAS one remote code execution vulnerability, and in the last year of the 1 0-month 7 Report to the official, but 1 3 0 days past the official still does not fix the vulnerability, so today he released the vulnerability details. ! Overview...
Seagate Business NAS Unauthenticated Remote Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit4 'Seagate Business NAS Unauthenticated Remote Command Execution', 'Description' = %q Some Seagate Business NA...
Seagate Business NAS Unauthenticated Remote Command Execution
Some Seagate Business NAS devices are vulnerable to command execution via a local file include vulnerability hidden in the language parameter of the CodeIgniter session cookie. The vulnerability manifests in the way the language files are included in the code on the login page, and hence is open ...
Seagate NAS Zero-Day Vulnerability allows Unauthorized Root Access Remotely
Seagate, a popular vendor of hardware solutions, has a critical zero-day vulnerability in its Network Attached Storage NAS device software that possibly left thousands of its users vulnerable to hackers. Seagate's Business Storage 2-Bay NAS product, found in home and business networks, is...
Seagate Business NAS <= 2014.00319 - Pre-Authentication Remote Code Execution (0day)
Some Seagate Business NAS devices are vulnerable to command execution via a local file include vulnerability hidden in the language parameter of the CodeIgniter session cookie. The vulnerability manifests in the way the language files are included in the code on the login page, and hence is open ...