9785 matches found
CVE-2007-2036: Undefined Security Weakness
The SNMP implementation in the Cisco Wireless LAN Controller WLC before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384...
[Full-disclosure] Some 0day Pocs
Mati Aharoni muts .@. offensive-security.com mailto:[email protected] http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...
Microsoft Office Word 2007 Multiple Vulnerabilities
Exploit for unknown platform in category dos / poc =================================================== Microsoft Office Word 2007 Multiple Vulnerabilities =================================================== Mati Aharoni muts email protected offensive-security.com http://www.offensive-security.com...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
Sql injection
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
CVE-2007-1786
CVE-2007-1786 is a SQL injection vulnerability in Hitachi Collaboration products (01-00 through 01-30), used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager. The underlying issu...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
libero-xss.txt
Libero.it, one of the most important italian ISP www.libero.it is affected from a XSS vulnerability. The vulnerability can be found in the "Community" section of Libero portal, and the affected functionality is "add nick" http://digiland.libero.it/profilo.phtml?nick=. The implementation of this...
MOODLE <= 1.5.2 user password read out
--/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account passwords in md5 hash Googledork :...
Unfixed XSS vulnerability at www.caribbeanbusinesscommunity.com
Security researcher Cyber-Unity, has submitted on 22/03/2007 a cross-site-scripting XSS vulnerability affecting www.caribbeanbusinesscommunity.com, which at the time of submission ranked 3129192 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
CVE-2006-7152
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values...
CVE-2006-7152
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values...
CVE-2006-7152
CVE-2006-7152 affects ASP-Nuke Community
CVE-2006-7152: Undefined Security Weakness
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values...
CVE-2006-7068
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the clheaders parameter to 1 menu.php3 and 2 login.php3...
CVE-2006-7068
CVE-2006-7068 is a PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the cl_headers parameter to menu.php3 or login.php3, indicating a remote file inclusion flaw in those entry p...
CVE-2006-7068: Undefined Security Weakness
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the clheaders parameter to 1 menu.php3 and 2 login.php3...
CVE-2007-0925
Cross-site scripting XSS vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter...