Socialware 2.2 Cross Site Scripting / Shell Upload

Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code : --------------------------------------------------------------------------------------...

Clipak Shell Upload

======================================================================================== | Title : clipak Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug :...

TinyPug Cross Site Request Forgery

============================================================================== » Note : Default Username Of Admin : Administrator ============================================================================== » Tinypug Remote Change Password Exploit...

Populum 2.3 SQL Injection

::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce communities VuLneraBiLity : SQL injection DoRk : "Powered by Populum" My HoMe : www.andhrahackers.com gReetZ : Mr.XXXX...

Fedora Update for moodle FEDORA-2008-0627

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2008-0627 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2008-11550

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2008-11550 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 9 Update: moodle-1.9.3-5.fc9

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Design/Logic Flaw

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

CVE-2008-1900

optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...

CVE-2008-1900

optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...

CVE-2008-1900

Carbon Communities 2.4 and earlier are affected by CVE-2008-1900 via the option_Update.asp component. The root cause is that a modified ID field allows remote attackers to edit arbitrary member information. The impact is remote modification of member data. The connected documents do not provide e...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

Sql injection

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

CVE-2008-1895

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

CVE-2008-1896

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

CVE-2008-1896

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

CVE-2008-1895

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

CVE-2008-1895

CVE-2008-1895 affects Carbon Communities versions

CVE-2008-1896

CVE-2008-1896 describes multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities versions 2.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through two parameters: (1) Redirect in login.asp and (2) OrderBy in member_send.asp. The consolidat...