Community Server Forums 'SearchResults.aspx' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14078/info Community Server Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit these issues to...

Tugux CMS (nid) BLIND SQL Injection Vulnerability

No description provided by source. =================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection...

Joomla Community Builder <= 1.0.1 - Blind SQL Injection Vulnerability

No description provided by source. Joomla Component Profiler Blind SQL Injection Vulnerability found by: $hur!k'n Contact: [email protected] ScriptName: Joomla ModuleName: Profiler Version: ? DORK: allinurl:comcomprofiler Exploit: /index.php?option=comcomprofiler&task=userProfile&user=SQL...

CliServ Web Community <= 0.65 (cl_headers) Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - CliServ Web Community = 0.65 clheaders Remote File Include Vulnerability + + + - Script name: CliServ Web Community v. 0.65 - Script site: http://sourceforge.net/projects/cliserv/ + + + - Find by: Kacper...

Linksys BEFVP4 SNMP Community String Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7317/info Linksys BEFVP4 VPN router has been reported prone to a sensitive information disclosure vulnerability. It has been reported that SNMP community strings which, are world readble by default, contain sensitive...

ULoki Community Forum 2.1 - (usercp.php) XSS Vulnerability

No description provided by source. Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' ...

microsoft office word 2007 - Multiple Vulnerabilities

No description provided by source. Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...

GlobalWebTek Design SQL Injection Vulnerability

No description provided by source. .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || GlobalWebTek Design SQL Injection Vulnerability Vendor: http://www.globalwebtek.com/ Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnli...

SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities

No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...

EFront <= 3.6.9 Community Edition Multiple Vulnerabilities

No description provided by source. Exploit Title: EFront = 3.6.9 Community Edition Multiple Vulnerabilities Google Dork: eFront version 3.6.9 inurl:index.php?ctg= Date: 5/09/2011 Public release: When 3.6.10 will be released Author: IHTeam Software Link:...

bananadance wiki b2.2 - Multiple Vulnerabilities

No description provided by source. Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7....

i-Net Online Community XSS and Authentication Bypass

No description provided by source...

Linksys WAP55AG 1.0.7 SNMP Community String Insecure Configuration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9688/info Linksys WAP55AG appliance has been reported prone to an insecure default configuration vulnerability. It has been reported that all SNMP MIB Management Information Base community strings, even read/write strings...

Creative Software UK Community Portal 1.1 DiscReply.php mid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A...

Community CMS 0.5 - Multiple SQL Injection Vulnerabilities

No description provided by source...

Joomla Health & Fitness Stats Persistent XSS Vulnerability

No description provided by source. Name : Joomla Health & Fitness Stats Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://joomla-extensions.instantiate.co.uk/jcomponents/healthstats Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...

Wordpress Plugin Glossary - SQL Injection

No description provided by source. Exploit Title: WordPress WP Glossary plugin SQL Injection Vulnerability Date: 2011-30-10 Author: longrifle0x software: Wordpress Download: http://wordpress.org/extend/plugins/wp-glossary/ Tools: SQLMAP DESCRIPTIONDiscovered a vulnerability in WP Glossary,...

Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept

No description provided by source. Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...

Evernote official community hacked, user passwords exist leakage risk-vulnerability warning-the black bar safety net

Evernote official community by unknown hackers to attack and invade, hackers in some cases be able to obtain the user's login information and personal information. Evernote community Manager Geoff Barry, released today regarding the data breach statement: “https://discussion.evernote.com the...