PHP Live! Detection

This host is running PHP Live!. PHP Live! enables live help and live customer support communication directly from a website. OpenVAS Vulnerability Test $Id: phplivedetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PHP Live! Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks...

CVE-2009-3592: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823...

X-Cart email subscription xss

No description provided by source. X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=plaintext/...

Ding Xiang multi-user online customer service system vulnerabilities-vulnerability warning-the black bar safety net

Use's blog Ding Xiang multi-user online customer service system is an enterprise-level Web site real-time Exchange System, web site visitors simply click on the page the dialogue in the icon, without having to install or download any software, you can direct and web customer service staff for...

Radisson Hotels Report Significant Data Breach

Add the Radisson Hotels & Resorts chain to the growing list of businesses datalossdb.org reporting significant data breaches that exposed sensitive customer data. In an open letter radisson.com to guests, Radisson chief operating officer Fredrik Korallus said the hotel chain’s computer system was...

Joomla! Component com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection

Joomla! Component comfooblasuggestions ideaid 1.5.11 - SQL Injection ----------------------------------------------------------------------------------------- joomla component comfooblasuggestions ideaid SQL Injection Vulnerability...

Security Pros Are Focused on the Wrong Threats

From The New York Times Riva Richmond Corporate information technology departments are prioritizing the wrong threats to their computer systems, focusing on old problems and leaving their companies open to a raft of new cyberattacks targeting sensitive customer and corporate information. That is...

ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability

ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-055 August 11, 2009 -- CVE ID: CVE-2009-0562 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Word Microsoft Office Excel ...

ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability

ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-056 August 11, 2009 -- CVE ID: CVE-2009-2496 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Word Microsoft Office Excel --...

PHP Live! 3.2.2 SQL Injection

Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance i...

PHP Live! 3.2.2 - questid SQL Injection (2)

PHP Live! 3.2.2 - questid SQL Injection 2 Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, y...

CVE-2009-2048

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors...

Attack destroys data of thousands of Web host Vaserv's customers

From The Register Dan Goodin A targeted attack against a U.K.-based Web hosting company has destroyed the data of an estimated 100,000 of the company’s customers’ sites. Vaserv.com was hit by an attack this weekend that exploited a flaw in a virtualization application the company was running,...

T-Mobile data on Full Disclosure is real

T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...

Adobe quarterly patch release should serve as an example

Adobe has become the third major software vendor to begin shipping its security updates on a regular schedule. Following the lead of Microsoft and Oracle, who have been releasing patches on a set schedule for many years, Adobe now will ship its patches once per quarter. It’s a move that’s overdue...

CVE-2009-1637

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

CVE-2009-1637

The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...

CVE-2009-1637: Undefined Security Weakness

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

Patch Tuesday barrage: A bad case of amnesia

Yesterday was a perfect example of the lack of communication between software vendors and their customers about security. Three vendors released major patches for serious bugs, all within hours of each other. You would think that customers would be a high priority for all vendors, especially in...