Arasism (IR) CMS Shell Upload Vulnerability

Exploit for php platform in category web applications Arasism IR CMS - File Upload Vulnerability Details: ======== A File Upload vulnerability is detected in the famous iranisch Arasism.com Content Management Panel System. The vulnerability allows an attacker remote with low privileged user accou...

Joomla! Component com_fireboard - SQL Injection

Joomla! Component comfireboard - SQL Injection Title: ====== Joomla comfireboard - SQL Injection Vulnerability Date: ===== 2012-07-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=655 VL-ID: ===== 655 Common Vulnerability Scoring System:...

Flynax General Classifieds v4.0 CMS Multiple Vulnerabilities

Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Details: ======== 1.1 A SQL Injection vulnerability is detected in the Flynax General Classifieds v4.0 Content Management System. Remote attackers without privileged user accounts can execute/inject own sql commands to compromise the...

Barracuda Appliances - Validation Filter Bypass Vulnerability

Document Title: =============== Barracuda Appliances - Validation Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=661 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================...

Joomla com_photo - SQL Injection Vulnerability

Document Title: =============== Joomla comphoto - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 641 Common...

Joomla com_photo - SQL Injection Vulnerability

Document Title: =============== Joomla comphoto - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 641 Common...

BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability

Document Title: =============== BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-08 Vulnerability Laboratory ID VL-ID: ====================================...

[SECURITY] Fedora 17 Update: postgresql-9.1.4-1.fc17

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

Enterprise Resource planning SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Author: Shahram Darvishvand karajikt21 Exploit Title: erp Enterprise Resource plannin SQL Injection Vulnerability Vendor : sida university system Date: 15/May/2012 Google Dork: "نرم افزار جامع erp شامل قوانین کپی رایت می باشد و نوع نسخ...

MyClientBase 0.12 - Multiple Vulnerabilities

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

Opial CMS 2.0 XSS / SQL Injection / Shell Upload

Title: ====== Opial CMS v2.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=522 VL-ID: ===== 522 Introduction: ============= Opial lets you create audio mp3/ram/rm/avi/mpg/wav/ai f or any other format audio/video...

Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=427 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

FAA US Academy SQL Injection

Title: ====== FAA US Academy AFS - Auth Bypass Vulnerability Date: ===== 2012-01-28 References: =========== http://vulnerability-lab.com/getcontent.php?id=171 VL-ID: ===== 171 Introduction: ============= This is a FAA computer system. FAA computer systems are provided for the processing of Offici...

Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities

Document Title: =============== Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=174 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 17...

VolksBank ZU Application - Auth Bypass Vulnerability

Document Title: =============== VolksBank ZU Application - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=382 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 382...

NATO INT RTO - File Include Web Vulnerability

Document Title: =============== NATO INT RTO - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=307 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID: ==================================== 307 Common...

[SECURITY] Fedora 13 Update: postgresql-8.4.7-1.fc13

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

CVE-2011-0736

Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the...

CVE-2011-0736

Adobe ColdFusion 9.0.1 CHF1 and earlier: when a web app uses a DBMS, remote attackers can cause information disclosure of database structure via an id=- query to a .cfm file. The vendor disputes severity; mitigation advised by ColdFusion Lockdown guide is proper Site-wide Error Handler and Debug ...

Update : Havij v1.13 automated SQL Injection tool - New version

Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...