Dredge School Administration System - DSMloader.php Account Information Disclosure

Dredge School Administration System - DSMloader.php Account Information Disclosure source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site request forgery...

Command School Student Management System - '/sw/backup/backup_ray2.php' Database Backup Direct Request Information Disclosure

source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An HTML injection...

Dredge School Administration System - '/DSM/loader.php' Account Information Disclosure

source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An information-disclosure...

3 6 0 web site security detection score may be forgery vulnerability-vulnerability warning-the black bar safety net

Detailed description: Testing Server site when the administrator to view the log, access to the ip, the seal off can. in. Vulnerability proof: I sealed the ip section is: deny 218.30.117.0/2 4; deny 182.118.33.0/2 4; deny 123.125.160.0/2 4; ! Repair solutions: I would also like to see this produc...

Alt-N MDaemon WorldClient 13.0.3 - Multiple Vulnerabilities

Alt-N MDaemon WorldClient 13.0.3 - Multiple Vulnerabilities ====================================================================== Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability ====================================================================== Software: Alt-N MDaemon v13.0....

VMSA-2012-0005 : VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi, and ESX address several security issues

a. VMware Tools Display Driver Privilege Escalation The VMware XPDM and WDDM display drivers contain buffer overflow vulnerabilities and the XPDM display driver does not properly check for NULL pointers. Exploitation of these issues may lead to local privilege escalation on Windows-based Guest...

CMSPro! 2.08 Cross Site Request Forgery

CMSPro! 2.08 CSRF Vulnerability Title : CMSPro! 2.08 Cross Site Request Forgery CSRF Vulnerability Software : CMSPro! Version : 2.08 Site : http://www.wojoscripts.com/cmspro/ or http://codecanyon.net/item/cms-pro-lightweight-content-management-system/140078 Author : Xadpritox Email :...

FreeBSD : phpmyadmin -- cross-site request forgery vulnerability (54f72962-c7ba-11dd-a721-0030843d3802)

The phpMyAdmin Team reports : A logged-in user can be subject of SQL injection through cross site request forgery. Several scripts in phpMyAdmin are vulnerable and the attack can be made through table parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

sBlog 0.7.3 Beta Cross Site Request Forgery

!-- - Product : sBlog - - Version : 0.7.3 Beta - - Website : http://www.sblog.se - - Author : 0x90 - - Homepage: WwW.0x90.CoM.Ar - - Contact : Gunsat0x90dotcomdotar - - Problem : Cross Site Request Forgery Vulnerability - - Sumary : sBlog has, by default, no CSRF protection, this may allow an...