894 matches found
Open Conference Systems <= 1.1.4 (fullpath) File Include Vulnerabilities
No description provided by source. Open Conference Systems = 1.1.3 Remote File Inclusion Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; theme.inc.php footer.inc.php bugs ; at -- theme.inc.php...
eUploader PRO 3.1.1 - CSRF/XSS Multiple Vulnerabilities
No description provided by source. ----------------------------------------------------------------------------------------------- Title: eUploader PRO 3.1.1 XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16. December 2009...
Acal calendar 2.2.6 CSRF Vulnerability
No description provided by source. Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: Calendar Admin: Edit Header and Footer Tested on:...
Drupal Open Omega模块访问绕过漏洞
Bugtraq ID:65822 Drupal是一套开放源码的内容管理平台。 当构建header和footer菜单时Drupal Open Omega不充分检查用户菜单访问，允许攻击者利用漏洞获取受限项的标题和路径信息。 0 Drupal Open Omega 7.x 厂商补丁： Drupal ----- Drupal Open Omega 7.x-1.1已经修复该漏洞，建议用户下载更新： http://drupal.org/project/openomega...
PT-2014-2518
Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 0.7.3 Roundcube Webmail versions 0.8.x prior to 0.8.6 Description The issue allows remote attackers to read arbitrary files via a full pathname in the value parameter for the generic message footer setting i...
VulnCheck KEV: CVE-2013-1904
Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database CCMDB 7.1 and 7.2 allows remote attackers to...
CVE-2012-3328
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database CCMDB 7.1 and 7.2 allows remote attackers to...
CVE-2012-3328: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database CCMDB 7.1 and 7.2 allows remote attackers to...
PT-2013-1599
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 IBM Maximo Asset Management Essentials version 7.1 Tivoli Asset Management for IT versions 7.1 through 7.2 Tivoli Service Request Manager versions 7.1 through 7.2 Change and Configuration Management...
PT-2012-5274
Name of the Vulnerable Software and Affected Versions phplist versions prior to 2.10.19 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters. The parameters page, footer, status, or testtarget in the send page can be exploited. Recommendatio...
CVE-2012-4246: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter; or the 2 footer, 3 status, or 4 testtarget parameter in the send page...
Acal calendar 2.2.6 CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Acal calendar Multiple Vulns Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested o...
WordPress WPtouch 1.9.32 URL Redirect
Exploit Title: 0-Day WPtouch WordPress Plugin 1.9.32 URL redirection Google Dork: intext:"Powered by Wordpress + WPtouch" with iphone/android User-Agent Author: MaKyOtOx special pwet to ansx & Zizounette & antrhacks for bitcoin Date: 25/07/2011 Software Link:...
Drupal 5.x, 6.x <= Stored Cross Site Scripting Vulnerability
========================================================================== Drupal 5.x, 6.x = Stored Cross Site Scripting Vulnerability ========================================================================== 1. OVERVIEW Drupal 5.x and 6.x are currently vulnerable to Stored Cross Site Scripting...
PT-2010-4723
Name of the Vulnerable Software and Affected Versions Free Simple CMS versions 1.0 and earlier Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the body, footer, header, menu left, or menu right parameter. This can be achieved by exploiting remote file...
IDEAL Migration 2009 4.5.1 Buffer Overflow
!/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed EXITFUNC=seh,...
Version number
I notice that the JIRA footer displays the current version of JIRA. Revealing the specifics of the revisions of software that you run in production is generally considered a bad security practice. Is there a reason that it is displayed openly to all users in licensed versions of the product? Is i...
Stash 1.0.3 Remote XSS Vulnerability
No description provided by source. Author: Author: Mr.SeCreT E-mail: [email protected]:[email protected] From: Syria http://english.islamweb.net/ Script Information: Script: Stash 1.0.3 Remote XSS Vulnerability Language: PHP Download:...
CVE-2008-6431
BMForum 5.6 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises from unsafely handling user-supplied input in several parameters: (1) outpused in index.php, (2) footer_copyright and (3) verandproname in newtem/footer/bsd01footer.php, and (4) topads and (5) myplugi...