6165 matches found
Insufficient Anti-automation и DoS уязвимости в CMS SiteLogic
Здравствуйте 3APA3A! В дополнение к предыдущим уязвимостям в CMS SiteLogic, сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: http://site/?mid=1 В контактной форме нет...
Contact Form Generator (EditFormLite) SQL Injection Vulnerability
================================================================= Contact Form Generator EditFormLite SQL Injection Vulnerability ================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...
Contact Form Generator SQL Injection
================================================================= Contact Form Generator EditFormLite SQL Injection Vulnerability ================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...
Contact Form Generator (EditFormLite) SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================================= Contact Form Generator EditFormLite SQL Injection Vulnerability =================================================================...
XSS vulnerability in Eden Platform
Vulnerability ID: HTB22539 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinedenplatform1.html Product: Eden Platform Vendor: Preation http://www.preation.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: X...
Simple Attach Remote File Inclusion
====================================================================== ====================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...
Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability
===================================================================== Groone's Simple Contact Form abspath RFI Vulnerability ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/...
Groone's Simple Contact Form Remote File Inclusion
===================================================================== Groone's Simple Contact Form abspath RFI Vulnerability ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...
Directory traversal
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...
CVE-2010-1062
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter. NOTE: some of these details are obtained...
CVE-2010-1062
CVE-2010-1062 affects Phpkobo Free Real Estate Contact Form 1.09; vulnerable component is codelib/sys/common.inc.php. The root cause is a directory traversal flaw that allows remote inclusion/execution of local files via the LANG_CODE parameter when magic_quotes_gpc is disabled. This is described...
CVE-2010-1063
CVE-2010-1063 affects Phpkobo Free Real Estate Contact Form 1.09. The vulnerability is a directory traversal in the LANG_CODE parameter that can cause local file inclusion and remote code execution in three PHP files: codelib/cfg/common.inc.php, form/app/common.inc.php, and staff/app/common.inc.p...
CVE-2010-1062
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter. NOTE: some of these details are obtained...
CVE-2010-1063
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...
CVE-2010-1063: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...
CVE-2010-1062: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter. NOTE: some of these details are obtained...
Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability ======================================================================== Application Info:...
Free Real Estate Contact Form 1.09 - Local File Inclusion
Free Real Estate Contact Form 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...
Cross site scripting
Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...
CVE-2009-4369
Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...