FlexCMS Login Cookie SQL Injection

The remote host is running FlexCMS, a content management system written in PHP. The version of the FlexCMS installed on the remote host fails to sanitize input passed to the login cookie 'FCLoginData12345' before using it in database queries. Provided PHP's 'magicquotesgpc' setting is disabled, a...

CVE-2009-3153

creationtimestamp| type| source ---|---|--- 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34659 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34663 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34661 2009-08-29...

CVE-2009-4717

creationtimestamp| type| source ---|---|--- 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34674 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34675 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34677 2009-08-29...

Discuz! Plugin Crazy Star < = 2.0 Sql injection Vulnerability-vulnerability warning-the black bar safety net

========================Author============================ + Founded : ZhaoHuAn + Contact : ZhengXingatshandagamesdotcom + Blog : http://www.patching.net/zhaohuan/ + Date : August, 26th 2 0 0 9 Double Seventh Festival ========================Soft Info========================= Software: Discuz!...

NatterChat Multiple XSS And SQL Injection Vulnerabilities

The host is running NatterChat and is prone to multiple XSS and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodnatterchatmultxssnsqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ NatterChat Multiple XSS And SQL Injection Vulnerabilities Authors: Antu Sanadi Copyright:...

CVE-2009-3186

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33188 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33186 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33187...

CVE-2009-3195

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34886 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34885...

EMO Breader Manager - 'video.php?movie' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability video.php movie EMO Breader Manager http://www.emophp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

55,000 Hacked Sites Serving Malware Cocktail

Security researchers are raising an alarm for a potent malware cocktail — backdoor Trojans and password stealers — being pushed to Windows users from about 55,000 hacked Web sites. According to Mary Landesman, a researcher in ScanSafe’s security threat alert team, the cybercriminals have embedded...

CVE-2009-4088

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9483 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10101...

CVE-2009-4089

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9483 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10101...

SQL Injection vulnerabilities in Subdreamer CMS

Background information: This report applies to Subdreamer newest stable release, 2.5.3.2 hotfix5. Subdreamer is a content management system, which is written in PHP and uses MySQL as its database backend. Subdreamer's home page is http://www.subdreamer.com Subdreamer can be integrated with...

CVE-2009-3211

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9462...

Videos Broadcast Yourself 2 - UploadID SQL Injection

Videos Broadcast Yourself 2 - UploadID SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability videoint.php UploadID Videos Broadcast Yourself V2 http://www.videosbroadcastyourself.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

CVE-2009-1872

creationtimestamp| type| source ---|---|--- 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33169 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33167 2009-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33170 2009-08-17...

Adobe Coldfusion 8 XSS / XSRF

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

[DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

Linux Kernel Sendpage Local Privilege Escalation

The Linux kernel failed to properly initialize some entries in the protoops struct for several protocols, leading to NULL being dereferenced and used as a function pointer. By using mmap2 to map page 0, an attacker can execute arbitrary code in the context of the kernel. Several public exploits...

CVE-2009-3182

creationtimestamp| type| source ---|---|--- 2009-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9425 2009-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9433...

CVE-2009-3428

creationtimestamp| type| source ---|---|--- 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9418 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9412 2009-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9420...