987 matches found
pChart 2.1.3 - Multiple Vulnerabilities
No description provided by source. Exploit Title: pChart 2.1.3 Directory Traversal and Reflected XSS Date: 2014-01-24 Exploit Author: Balazs Makany Vendor Homepage: www.pchart.net Software Link: www.pchart.net/download Google Dork: intitle:pChart 2.x - examples intext:2.1.3 Version: 2.1.3 Tested...
PT-2016-6661
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.15 phpMyAdmin versions 4.4.x through 4.4.15.6 phpMyAdmin versions 4.6.x through 4.6.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via...
CVE-2012-1088
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...
CVE-2012-1088: Improper Link Resolution Before File Access
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...
pChart 2.1.3 Cross Site Scripting / Directory Traversal
Exploit Title: pChart 2.1.3 Directory Traversal and Reflected XSS Date: 2014-01-24 Exploit Author: Balazs Makany Vendor Homepage: www.pchart.net Software Link: www.pchart.net/download Google Dork: intitle:"pChart 2.x - examples" intext:"2.1.3" Version: 2.1.3 Tested on: N/A Web Application. Tested...
PHP vulnerability discovery ideas+examples-vulnerability warning-the black bar safety net
Recent research PHP-vulnerability of the excavation, summed up some of my digging into the vulnerability, finishing some thoughts, seeking the path of the God-man complement, criticism, guidance This article all of the examples are from me the clouds on has been by the manufacturer to allow...
Mandriva Linux Security Advisory : curl (MDVSA-2013:276)
Updated curl packages fix security vulnerability : Scott Cantor discovered that curl, a file retrieval tool, would disable the CURLOPTSSLVERIFYHOST check when the CURLOPTSSLVERIFYPEER setting was disabled. This would also disable ssl certificate host name checks when it should have only disabled...
Zoom X4 / X5 SQL Injection / Authentication Bypass Vulnerabilities
Zoom X4 and X5 modems suffers from authentication bypass and remote SQL injection vulnerabilities. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3...
Your Online Agents Sql Injection Vulnerability
Exploit for php platform in category web applications Your Online Agents Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home : http://www.iphobos.com/blog/ .:. Dork :...
phonon, qt security update
CentOS Errata and Security Advisory CESA-2013:0669 Updated qt packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
Raidbooking v.1.1 <= Sql Injection Vulnerability
Raidbooking Is A Guild Manager for MMORPGS +P0c : localhost/raid.php?id=1 +Examples: http://mossraid.wz.cz//raid.php?id=1%27 http://wow.boule.cz/raids/raid.php?id=1%27 http://www.fredzy.fr/WOW/raidCP/raid.php?id=1%27%22 ---|DzMafia|--- We Are : PassWord | BackUp | Gel-dz | EliteTrojan | Lakamora ...
ZPanel 10.0.1 XSS / CSRF / SQL Injection
Exploit Title: ZPanel = 10.0.1 CSRF, XSS, SQLi, Password Reset Date: 04/11/2012 Exploit Author: pcsjj Vendor Homepage: http://www.zpanelcp.com/ Version: 10.0.1 Software Link: http://sourceforge.net/projects/zpanelcp/files/latest/download Downloads: 90,382 CVE : CVE-2012-5683 CSRF, CVE-2012-5684...
CVE-2011-5219
Directory traversal vulnerability in examples/showcode.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
PT-2012-2196
Name of the Vulnerable Software and Affected Versions mPDF versions 5.3 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. dot dot in the filename parameter of the examples/show code.php file. Recommendations For mPDF versio...
CVE-2011-5219: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in examples/showcode.php in mPDF 5.3 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
Gong Interactive Web Design SQL Injection
gonginteractive Web Design Sql Injection Vulnerability + Exploit Title : gonginteractive Web Design Sql Injection Vulnerability Author : Siamak.Black Site : Http : www.datacoders.org & iranhack.org Tested On : BackTrack 5 & 7 Emai : [email protected] Software Link : http://gonginteractive.co...
Dornica CMS SQL Injection
dornica Cms Sql Injection Vulnerability + Exploit Title : dornica Cms Sql Injection Vulnerability + Google Dork :Powered And Designed By PersianSoft.org & powered by dornica + Autor : Siamak.Black + Download : http://www.dornica.net/ + MAil : [email protected] + Tested on: BackTrack , 7...
Fluger Edit 2 Blind SQL Injection / Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild...
Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64
A flaw was found in the way Tomcat handled the Transfer-Encoding header in HTTP requests. A specially crafted HTTP request could prevent Tomcat from sending replies, or cause Tomcat to return truncated replies, or replies containing data related to the requests of other users, for all subsequent...
Limny 3.3.1 Blind SQL Injection
Exploit Title: Limny v 3.3.1 Blind SQL Injection Date: 31/7/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link: http://www.limny.org/releases/limny-3.3.1.zip Tested on: Linux/Windows Example 1: http://127.0.0.1/limny-3.3.1/index.php?q=-1' or 57 = '5...