10381 matches found
Skype Community Body / Title Cross Site Scripting
Title: ====== Skype Community - Mail Encoding Web Vulnerability 1 Date: ===== 2012-11-20 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=708 MICROSOFT SECURITY RESPONSE CENTER MSRC ID: 13021bc VL-ID: ===== 708 Common Vulnerability Scoring System:...
Directory traversal
Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...
CVE-2010-5280
Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...
CVE-2010-5280
Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...
CVE-2010-5280
The CVE-2010-5280 entry describes a directory traversal (Local File Inclusion) in Joomla!’s Community Builder Enhanced (CBE) component (com_cbe) versions 1.4.8–1.4.10. The vulnerability allows remote attackers to include and execute arbitrary local files by supplying .. in the tabname parameter o...
PT-2012-1490
Name of the Vulnerable Software and Affected Versions Community Builder Enhanced CBE com cbe component versions 1.4.8 through 1.4.10 for Joomla! Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a "userProfile"...
CVE-2010-5280: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...
Skype Community - Mail Encoding Web Vulnerability #2
Document Title: =============== Skype Community - Mail Encoding Web Vulnerability 2 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=719 MICROSOFT SECURITY RESPONSE CENTER MSRC ID: 13022 & 13034 Release Date: ============= 2012-11-20 Vulnerability...
BananaDance Wiki b2.2 - Multiple Web Vulnerabilities
Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Banan...
ClubHack 2012 Hacking and Security Conference
Carrying reputation of being India's choicest and oldest hacker's conference, Team ClubHack proudly brings the 6th edition of ClubHack Hacking and Security Conference with more exciting activities. ClubHack 2012 hacker's convention will be held from Nov. 30th to Dec 3rd, 2012 in Pune, India...
Bananadance Wiki b2.2 - Multiple Vulnerabilities
Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Banan...
WordPress Related Posts Exit Popup SQL Injection
In the name of GOD Exploit Title: Wordpress relatedpostsexitpopup SQL Injection Vulnerability Google Dork: inurl:"/relatedpostsexitpopupwindow.php" OR intitle:"Thanks for visiting our site" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 Location:...
[SECURITY] Fedora 18 Update: rt3-3.8.15-1.fc18
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
[SECURITY] Fedora 17 Update: rt3-3.8.15-1.fc17
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
[SECURITY] Fedora 16 Update: rt3-3.8.15-1.fc16
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
DCForum Information Disclosure
Exploit Title: DCForum Information Disclosure Date: 01/11/2012 Author: r45c4l @r45c4l Email: [email protected] Script url: http://webscripts.softpedia.com/script/Discussion-Boards/DCForum-20872.html Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...
PG Dating Pro CMS 1.0 - Multiple Vulnerabilities
Title: ====== PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities Date: ===== 2012-10-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=736 VL-ID: ===== 736 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...
'The Hacker News' Celebrating 2nd Birthday
One of the most awaited occasions in a year is your birthday, same way we are today celebrating 'The Hacker News' 2nd Birthday week from on 28th October-3rd November 2012. Originally founded on 1st November 2010 by Mohit Kumar, 'The Hacker News' was the very First dedicated Hacking and Security...
Anonymous hacks 20 million accounts to promote Operation Jubilee
Anonymous hackers claimed that they compromise over 20 million user accounts worldwide this year to promote Operation Jubilee. Large community web sites were targeted to gain access to users' contact information. Many administrators denied that their databases were at risk while all their data wa...