8112 matches found
WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities
Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can ...
CVE-2011-4569
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
Sql injection
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
CVE-2011-4569
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
CVE-2011-4569
CVE-2011-4569 describes an SQL injection in MyBB’s Userbar Plugin (userbarsettings.php) for MyBB, via the image2 parameter in version 2.2. The vulnerability is exploitable remotely with network access and low complexity, allowing arbitrary SQL commands and partial impacts on confidentiality, inte...
CVE-2011-4569: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
PT-2011-4997
Name of the Vulnerable Software and Affected Versions MyBB Forum Userbar plugin version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the image2 parameter in the userbarsettings.php file. Recommendations For MyBB Forum Userbar plugin...
TinyMCE / flvPlayer Cross Site Scripting / Disclosure
No description provided by source. I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in...
MyBB 1.x 多个安全漏洞
BUGTRAQ ID: 50816 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在跨站脚本执行、跨站请求伪造和其他多个安全漏洞，攻击者可利用这些漏洞在受影响站点用户浏览器中执行任意脚本，窃取cookie验证凭证，泄露或修改敏感信息或这些非法操作。 1）好友列表中的未解析头像中存在错误； 2）通过用户名传递的输入在返回给用户之前没有正确过滤，导致在受影响站点的用户浏览器中执行任意HTML和脚本代码； 3）应用允许用户通过HTTP请求执行某些操作，但不验证这些请求。可在用户浏览特制的网页时更改语言设置。 MyBB 1.x 厂商补丁： MyBB ----...
Multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications
Hello 3APA3A! I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in flvPlayer, which is...
TinyMCE / flvPlayer Cross Site Scripting / Disclosure
Hello list! I want to warn you about multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications and tens millions of web sites. These are Full path disclosure, Content Spoofing and Cross-Site Scripting vulnerabilities in TinyMCE CS and XSS are in flvPlayer, which is includ...
WordPress Clickdesk Live Support Chat Cross Site Scripting
Www.Aria-security.com/forum/ Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/clickdesk-live-support-chat/ Bug Found.....: http://Aria-Security.Com/forum/ discovery.....: Am!r IrIsT contact.......: AmiratIrIsT.i...
Valve подтвердила взлом Steam
Компания Valve разослала пользователям своего сервиса Steam письмо, в котором говорится, что причиной недавнего отключения форумов стала хакерская атака. Ранее представители Valve не комментировали эту информацию. Как сообщается в письме, хакеры взломали не только форум сервиса, но также смогли...
Possible Credit Card Theft in Steam Website Hacking
Possible Credit Card Theft in Steam Website Hacking Valve CEO Gabe Newell has contacted all users of the Steam game distribution platform to let them know that the company has suffered a security breach. Right before going offline, users saw a new category in the forum that directed them to open ...
Dvbbs8. 2 sql Edition login. asp remote sql injection vulnerability-vulnerability warning-the black bar safety net
Today in learn PHP when a friend sent me to a station, lets do a security check, find the station there is a forum dvbbs, Oh, this is a vulnerability to ever guy. The latest version of the and storm a remoteSQL injectionvulnerabilities in it! The following provides the vulnerability analysis and...
CVE-2011-4172
Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...
CVE-2011-4173
Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...
CVE-2011-4172
Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...