phpChess Community Edition 2.0 - Multiple RFI Vulnerabilities

No description provided by source. phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.phpchess.net/index-3.html Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/phpchess/layoutadmincfg.php?RootPath=Shell...

HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability

No description provided by source. Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability Date: January 1st, 2010 Author: Sora Version: 1.6.5 and lower versions Tested on: Windows Vista ------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability...

EFront <= 3.6.9 Community Edition Multiple Vulnerabilities

No description provided by source. Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: eFront version 3.6.9 inurl:index.php?ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:...

SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities

No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...

Open-School Community Edition 2.2 Cross Site Scripting

============================================================== Title ...| Open-School Community Edition 2.2 Version .| osv2.2-CE.zip Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://sourceforge.net ============================================================== + From admin user:...

Mobile Forensics: Santoku

Santoku is a platform for mobile forensics, mobile malware analysis and mobile application security assessment. The free Santoku Community Edition is a collaborative project to provide a pre-configured Linux environment with utilities, drivers and guides for these areas. Boot into Santoku and get...

SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities

SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control of the software. Version: 6.5.2 Buil...

CVE-2011-4951

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

Open redirect

Open redirect vulnerability in phpgwapi/ntlm/index.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter...

Directory traversal

Directory traversal vulnerability in admin/remote.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in the type parameter...

CVE-2011-4948

CVE-2011-4948 is a directory traversal vulnerability in EGroupware’s admin/remote.php. Affected products are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The issue allows remote attackers to read arbitrary files by supplying...

CVE-2011-4949

The CVE-2011-4949 entry concerns an SQL injection in EGroupware’s web UI: phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php. Affected are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The vulnerability allows remote atta...

CVE-2011-4951

CVE-2011-4951 describes an open redirect vulnerability in the file path phpgwapi/ntlm/index.php used by EGroupware’s EPL before 11.1.20110804-1 and Community Edition before 1.8.001.20110805. According to the sources, an attacker can pass a URL in the forward parameter to redirect victims to arbit...

SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities

SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55347/info SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data. Attackers can...

SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55347/info SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data. Attackers can exploit these issues to obtain sensitive information that may lead to further...

CVE-2011-5090

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

PT-2012-2069 · Gr Board · Gboard

Name of the Vulnerable Software and Affected Versions: GR Board version 1.8.6.5 Community Edition Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tableType or blindTarget parameter to "view.php", the delTargets0 parameter to "view...

PT-2012-2068 · Gr Board · Gboard

Name of the Vulnerable Software and Affected Versions: GR Board aka grboard version 1.8.6.5 Community Edition Description: The issue allows remote attackers to modify or delete data without requiring authentication for certain database actions. This can be achieved by sending a request to specifi...

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properl...

Multiple XSS in KnowledgeTree Community Edition

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in KnowledgeTree Community Edition, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in KnowledgeTree Community Edition: CVE-2012-0988 Input appended to the...