Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities

Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

Ananta Gazelle SQL Injection Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: Ananta Gazelle SQL Injection Vulnerability Vendor: http://www.anantasoft.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: Ananta Gazelle is a rich JavaScript enabled CMS with...

CVE-2010-2275

creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33764...

AneCMS 1.0 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38657/info AneCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potential...

60cycleCMS - 'select.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

TikiWik < 4.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38608/info TikiWiki is prone to multiple vulnerabilities, including: - An SQL-injection vulnerability - An unspecified authentication-bypass vulnerability - An unspecified vulnerability Exploiting these issues could allow an attacker to compromise the...

MS10-016: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

The remote Windows host contains a version of Windows Movie Maker that is affected by a buffer overflow vulnerability due to the way the application parses project file formats. If an attacker can trick a user on the affected system into opening a specially crafted Movie Maker or Producer file...

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability

Exploit for unknown platform in category local exploits...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)

This update of acroread fixes : - Cross-domain request vulnerability. CVE-2010-0186 : CVSS v2 Base Score: 5.8 - An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0188 : CVSS v2 Base Score: 6.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

AST-2010-003: Invalid parsing of ACL rules can compromise security

Asterisk Project Security Advisory - AST-2010-003 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Invalid parsing of ACL rules can compromise | | | security |...

iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS

Exploit for unknown platform in category dos / poc =============================================================== iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS =============================================================== Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne...

CVE-2010-1365

creationtimestamp| type| source ---|---|--- 2010-02-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11600 2010-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11837...

Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

ProMan 0.1.1 - Multiple File Inclusions

ProMan 0.1.1 - Multiple File Inclusions ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI:...

CVE-2010-1537

creationtimestamp| type| source ---|---|--- 2010-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11585...

JAG (Just Another Guestbook) <= 1.14 Information Disclosure Vulnerability

JAG is prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Web Server Creator - Web Portal v 0.1 Multi Vulnerability

Exploit for unknown platform in category web applications ========================================================= Web Server Creator - Web Portal v 0.1 Multi Vulnerability =========================================================...

SphereCMS 1.1 Alpha SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== SphereCMS 1.1 Alpha SQL Injection Vulnerability =============================================== AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor:...

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...

AST-2010-002: Dialplan injection vulnerability

Asterisk Project Security Advisory - AST-2010-002 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Dialplan injection vulnerability |...