9576 matches found
Bs Events_Locator Script SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs EventsLocator Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/...
XOOPS 'events' Module - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27890/info The XOOPS 'events' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...
WordPress Community Events plugin <= 1.2.1 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Community Events plugin = 1.2.1 SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/community-events.zip Version: 1.2.1 tested...
Buddy Zone <= 1.5 - Multiple SQL Injection Vulnerabilities
No description provided by source. --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR:...
WWWeb Concepts Events System 1.0 LOGIN.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13859/info WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in a...
joomla component memorybook 1.2 - Multiple Vulnerabilities
No description provided by source. SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found o...
DevelopItEasy Events Calendar 1.2 - Multiple SQL Injection Vulnerabilities
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...
Wordpress Events Plugin SQL Injection Vulnerability
No description provided by source...
Dragon Internet Events Listing 2.0.01 venue_detail.asp VenueID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...
DEBIAN-CVE-2014-0206
Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...
QQ group played a window, QQXSS new vulnerability alerts-a vulnerability alert-the black bar safety net
Preface Estimates of engage security of the students this morning, landing QQ, open the QQ group message, is a bunch of pop-UPS playing the depressed, due to a QQ group storage typeXSS. Network sharp knives team mango classmates yesterday found this QQ group storageXSS, and also submitted a TSRC,...
openSUSE Security Update : clutter (openSUSE-SU-2013:1540-1)
clutter was updatd to fix improper translation of hierarchy events gnome-shell crash after system resume CVE-2013-2190, bnc843441. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)
libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
openSUSE Security Update : Opera (openSUSE-SU-2013:0273-2)
Opera 12.13 is a recommended upgrade offering security and stability enhancements. -fixed an issue where Opera gets internal communication errors on Facebook -fixed an issue where no webpages load on startup, if Opera is disconnected from the Internet -fixed an issue where images will not load...
CVE-2014-0935
Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related to events...
CVE-2014-0935
Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related to events...
BEdita 3.4.0 CMS Multiple Vulnerabilities
Latest BEdita CMS suffers on few vulnerabilities because of poor parameter filtration and none csrf tokens. Title: BEdita 3.4.0 CMS Multiple Vulnerabilities Vendor: bedita.com Demo: site.demo.bedita.com Version: 3.4.0 Latest ATM Date: 02.06.14 Dork: intext:"Proudly powered by BEdita" Contact:...
CVE-2011-5249
Cross-site scripting XSS vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment SNARE for Linux agent before 1.7.0 allows remote attackers to inject arbitrary web script or HTML via a logged shell command...
CVE-2013-1407
Multiple cross-site scripting XSS vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 scope parameter to index.php; 2 username, 3 dbemphone, 4 useremail, or 5...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 scope parameter to index.php; 2 username, 3 dbemphone, 4 useremail, or 5...