256 matches found
PT-2012-1925 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: The issue arises from improper handling of user/action redir group messages, allowing remote authenticated users to...
HBGary Federal CEO Aaron Barr Steps Down
Embattled CEO Aaron Barr says he is stepping down from his post at HBGary Federal to allow the company to move on after an embarassing data breach. The announcement comes three weeks after Barr became the target of a coordinated attack by members of the online mischief making group Anonymous, whi...
Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability
Exploit for unknown platform in category web applications ============================================================ Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability ============================================================ Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email...
Uebimiau Webmail 3.2.0-2.0 Email Disclosure
Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure Examples: E.g.1 http://www.rufino.eti.br/webmail/inc/database/...
Uebimiau Webmail 3.2.0-2.0 - Email Disclosure
Uebimiau Webmail 3.2.0-2.0 - Email Disclosure Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau...
Uebimiau Webmail 3.2.0-2.0 - Email Disclosure
Exploit Title: Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Date: 09 March 2010 Author: Z3r0c0re, R4vax Software Link: http://www.uebimiau.org/download.php Version: 3.2.0-2.0 Tested on: php Code : Uebimiau Webmail Email Disclosure D0rk: "Uebimiau Webmail v3.2.0-2.0" Vuln:...
Dren's PHP Uploader Remote File Upload Vulnerability
No description provided by source. Dren's PHP Uploader Remote File Upload Vulnerability + Author : Cyb3r IntRue +Email : [email protected]:[email protected] & [email protected]:[email protected] + Date : 29/12/2009 + Software Link : http://freewebtown.com/thanigga/Dren's%20PHP%20Uploader.rar + Team :...
Smart PHP Subscriber Disclosure
----------------------------------------------------------------------------------------------- Title: Smart PHP Subscriber Multiple Disclosure Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...
pHNews Alpha 1 - genbackup.php Database Disclosure
pHNews Alpha 1 - genbackup.php Database Disclosure 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...
CVE-2008-3451
PhpWebGallery 1.7.0 and 1.7.1 are affected by CVE-2008-3451. Remote authenticated users with advisor privileges can obtain real e-mail addresses of other users by editing the target user’s profile. The NVD records a CVSS2 base score of 4.0 (Medium) with network attack vector and low complexity, h...
Dovecot IMAP 1.0.10 <= 1.1rc2 Remote Email Disclosure Exploit
Exploit for multiple platform in category remote exploits ============================================================= Dovecot IMAP 1.0.10 1.1rc3 Exploit Here's an exploit for the recent TAB vulnerability in Dovecot. It's nothing special since in the wild there are few to none targets because of...
[SA18361] Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities
TITLE: Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities SECUNIA ADVISORY ID: SA18361 VERIFY ADVISORY: http://secunia.com/advisories/18361/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Joomla...
Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks against a computer. An attacker can...
BasiliX Webmail 1.1 - Email Header HTML Injection
source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain acces...
Phorum Discussion Board Security Bug (Email Disclosure)
Concerning latest Phorum version 3.3.2 A bug in the PHP based forum script Phorum makes it possible to obtain the email addresses of the 10 most active users. In the 'admin/' directory of the forum there is a script called 'stats.php' that allows administrators and anyone else, since there is no...
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL th...