8633 matches found
OXID eShop Community Edition Privilege Escalation Vulnerability
This host is installed with OXID eShop Community Edition and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopprivescalationvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Privilege Escalation Vulnerability Authors: Nikita MR...
OXID eShop Community Edition Unauthorized Access Vulnerability
This host is installed with OXID eShop and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthaccessvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Access Vulnerability Authors: Nikita MR Copyright: Copyright ...
OXID eShop Community Edition 4.x <= 4.1.1 Unauthorized Write Access Vulnerability
OXID eShop Community Edition is prone to unauthorized access vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
OXID eShop Community Edition 4.x < 4.1.0 Privilege Escalation Vulnerability
OXID eShop Community Edition is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache Shows How to Handle a Network Compromise
The Apache Software Foundation last week was the victim of a serious network attack in which a number of its Web servers and other machines were compromised by attackers who were able to gain root privileges and jump from machine to machine. The incident was embarrassing and a serious problem for...
Code injection
The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to 1 read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName 1.3.6.1.6.3.18.1.1.1.2 or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName 1.3.6.1.6.3.16.1.2.1.3 with...
CVE-2008-7095
The CVE-2008-7095 entry affects ArubaOS 3.3.2.6 on Aruba Mobility Controller, where the SNMP daemon does not restrict SNMP access. This allows remote attackers to read SNMP data: (1) all community strings via SNMP-COMMUNITY-MIB::snmpCommunityName or vacmGroupName via SNMP-VIEW-BASED-ACM-MIB with ...
JVN#31035930 SugarCRM vulnerable to SQL injection
SugarCRM is a customer relationship management CRM software. SugarCRM contains a SQL injection vulnerability. Impact As a result of SQL injection, contents within the database can be compromised. Solution Update the Software Update to the latest version according to the information provided by th...
CVE-2009-2914
Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2009-2914
Cross-site scripting XSS vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2009-2914
The CVE-2009-2914 issue applies to XZero Community Classifieds (versions up to 4.97.8). It is a Cross-site Scripting (XSS) vulnerability in index.php that allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded file. The connected sources confirm the affected pr...
CVE-2009-2913
CVE-2009-2913 affects XZero Community Classifieds 4.97.8. A cross-site scripting (XSS) vulnerability exists in index.php that allows remote attackers to inject arbitrary script/HTML via the URI. According to NVD, impact is partial integrity impact with no confidentiality or availability impact; e...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...
CVE-2009-2893
CVE-2009-2893 affects XZero Community Classifieds 4.97.8. The vulnerability is a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary script or HTML via (1) the postevent parameter in a post action, or (2) the _xzcal_y parameter. The public descriptions id...
CVE-2009-2893
Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...
2WIRE Gateway Authentication Bypass & Password Reset
2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...
Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit
No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...
Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Joomla Component compms 2.0.4 Ignore-List SQL Injection Exploit ================================================================== PMS Enhanced-Config Tab: Backend -...
Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection
PMS Enhanced-Config Tab: Backend - Ingorlist: Yes Create a valid User on the target Joomla 1.0.15 System with Community Builder, login and copy the cookieinformation into the $cookie var below, adjust the User-Agent on your Post Header dependent on your Browser. Notice: Pay attention on your...
XZero Community Classifieds 4.97.8 XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...