ManageEngine Security Manager Plus <= 5.5 build 5505 Path Traversal

Exploit for multiple platform in category web applications !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Security Manager Plus 0x90.nl Software link :...

CVE-2012-5298

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

Improper access control

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

CVE-2012-5298

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

CVE-2012-5298: Undefined Security Weakness

Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request...

CVE-2011-5204: Undefined Security Weakness

Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database...

IKware Sql Injection Vulnerability

Exploit for php platform in category web applications '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' IKware Sql Injection Vulnerability Google Dork: intext:"Desenvolvido por IKware" inurl:".php?id=" Date: 13/9/2012 Author: Sys32 Email: tha.Sys32atgmaildotcom Vendor:...

DELTAScripts PHP Links - Multiple SQL Injections

DELTAScripts PHP Links - Multiple SQL Injections source: https://www.securityfocus.com/bid/55478/info DeltaScripts PHP Links is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues cou...

CVE-2012-1607

The Command Line Interface CLI script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request...

PT-2012-4714

Name of the Vulnerable Software and Affected Versions Icinga version 1.7.1 Description The issue in Icinga allows the icinga user to access all databases due to the database creation script granting excessive access. This could potentially be exploited via unspecified vectors, allowing icinga use...

CVE-2012-3441: Undefined Security Weakness

The database creation script module/idoutils/db/scripts/createmysqldb.sh in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors...

TravianX Sql Injection Vulnerabilities

Exploit for php platform in category web applications 68b 6MMMMb\ Y89 6M' 9 MM / YM. MM M' 6MMMMb\ 6MMMMb 6MMMMb YMMMMb Mb d' MM' MM' Mb MM' Mb Mb YM. ,P YM. MM ,MM MM MM M YMMMMb .M9 ,MM' MM Mbd' Mb MMMM ,M' L ,M9 YMP L ,MM Mb ,M' MYMMMM9 M MYMMMM9 MM MMMMMMMM d' MM 8,P MM. ,M9 @PT YMM YMMMM9...

Joomla! Component com_niceajaxpoll 1.3.0 - SQL Injection

Joomla! Component comniceajaxpoll 1.3.0 - SQL Injection Title : Joomla comniceajaxpoll = 1.3.0 SQL Injection Vulnerability Author : Patrick de Brouwer - @knickz0r NLSecurity - www.nlsecurity.org Dork : inurl:"/index.php?option=comniceajaxpoll" Software : Joomla component Nice Ajax Poll = 1.3.0...

Moderate: Red Hat Security Advisory: perl-DBD-Pg security update

An updated perl-DBD-Pg package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4XP Critical SQL Injection Vulnerability Exposed

zSecure team has recently discovered a critical SQL Injection Vulnerability in the web portal of 4XP, a leading online forex broker having more than 1 lakh customer base. Financial transactions are carried on the broker's paltform on daily basis including but not limited to Credit Card...

AutoFORM PDM Archive contains multiple vulnerabilities

Overview AutoFORM PDM Archive contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description According to AutoFORM's website AutoFORM PDM Archive is a comprehensive output management solution that encompasses document...

Galette (picture.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Source: http://www.securityfocus.com/bid/53463/info Galette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Sourcefire Defense Center - multiple vulnerabilities.

Hi list, -- Product description from vendor site: The Sourcefire Defense CenterR management console is the "nerve center" of the Sourcefire 3DR System. It provides a powerful, easy-to-use interface for categorizing events, generating recurring reports, scheduling automated IPS, NGIPS, and NGFW...

Polyethylene commercial po-2. 0 storm the library and cookies spoof of defect and repair-vulnerability warning-the black bar safety net

Program: A commercial po-2. 0 google keywords: intext:technical support: Ben Ming technology poly commercial po A few days ago met a program called poly commercial treasure, the source code download here, today only have time to simple looked...... Vulnerability: violent library as well as the...

Sourcefire Defense Center File Download / Cross Site Scripting

-- Product description from vendor site: The Sourcefire Defense CenterR management console is the "nerve center" of the Sourcefire 3DR System. It provides a powerful, easy-to-use interface for categorizing events, generating recurring reports, scheduling automated IPS, NGIPS, and NGFW detection...