Google Chrome < 12.0.742.91 Multiple Vulnerabilities

Binary data 5943.pasl...

Tickets 2.13 SQL Injection Vulnerability

No description provided by source. !------------------------------------------------------------------------ Software................Tickets 2.13 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.ticketscad.org/ Discovery...

Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (2)

Allomani E-Store 1.0 - Cross-Site Request Forgery Add Admin 2 E-Store 1.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/storescript.html === Exploit ===...

Feng Office 1.7.3.3 Cross Site Request Forgery

Vulnerability ID: HTB22910 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfengoffice.html Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site...

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input...

CVE-2011-1059

Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that entice a user to resubmit...

UMI.CMS 2.8.1.2 Cross Site Request Forgery

Vulnerability ID: HTB22812 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinumicms.html Product: UMI.CMS Vendor: umisoft http://www.umi-cms.ru/ Vulnerable Version: 2.8.1.2 Vendor Notification: 25 January 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tec...

ImpressCMS 1.2.3 Final Cross Site Scripting

Vulnerability ID: HTB22766 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinimpresscms.html Product: ImpressCMS Vendor: The ImpressCMS Project http://www.impresscms.org Vulnerable Version: 1.2.3 Final and probably prior versions Vendor Notification: Vulnerability Type: XSS Cross Site...

Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability

Exploit for asp platform in category web applications ================================================================== Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability ================================================================== 0day.today 2018-03-19...

Site2Nite Big Truck Broker - txtSiteId SQL Injection

Site2Nite Big Truck Broker - txtSiteId SQL Injection...

Webmedia Explorer 6.13.1 Cross Site Scripting

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Event Ticket Portal Script Cross Site Request Forgery

=========================================================== Event Ticket PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Event Ticket PORTAL - Admin Password Chage CSRF Exploited by KnocKout Username: New Password: input type="subm...

XSS vulnerability in Docebo Announcements

Vulnerability ID: HTB22612 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindoceboannouncements.html Product: Docebo Vendor: Docebo http://www.docebo.org/ Vulnerable Version: 3.6.0.4 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS Cross Site...

CVE-2010-1764

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows remote web servers to obtain sensitive information by recording the form data...

Design/Logic Flaw

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows remote web servers to obtain sensitive information by recording the form data...

CVE-2010-1764

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows remote web servers to obtain sensitive information by recording the form data...

CVE-2010-1764

CVE-2010-1764 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. The vulnerability arises from following multiple redirections during form submission, enabling remote servers to record form data and access sensitive information. Conne...

CVE-2010-1764

Removed by vendor...

CVE-2010-1764: Undefined Security Weakness

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections during form submission, which allows remote web servers to obtain sensitive information by recording the form data...

Getsimple CMS 2.01 - components.php Cross-Site Scripting

Getsimple CMS 2.01 - components.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40374/info GetSimple CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...