7174 matches found
CVE-2012-0900
CVE-2012-0900 : Beehive Forum 1.0.1 has multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to either forum/register.php or forum/logon.php. The provided documents confirm the affected product/version and ...
Mingle Forum < 1.0.33 - Multiple SQL Injection
The mingle-forum WordPress plugin was affected by a Multiple SQL Injection security vulnerability...
100 Kenya government websites breached by Indonesian hacker
100 Kenya government websites breached by Indonesian hacker An Indonesian hacker on Tuesday attacked and defaced more than 100 Kenya government websites Among the ministries affected include the Ministries of Local Government, Livestock, Environment, Fisheries, Housing, and Industrialisation in a...
Beehive Forum 101 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51424/info Beehive Forum 101 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...
Beehive Forum 101 Cross Site Scripting
Advisory: Beehive Forum 101 Multiple XSS vulnerabilities Advisory ID: SSCHADV2011-042 Author: Stefan Schurtz Affected Software: Successfully tested on Beehive Forum 101 Vendor URL: http://www.beehiveforum.co.uk/ Vendor Status: informed ========================== Vulnerability Description...
Beehive Forum 101 - Multiple Cross-Site Scripting Vulnerabilities
Beehive Forum 101 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51424/info Beehive Forum 101 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
World Economic Forum Sees Dark Side To Connectivity
The latest edition World Economic Forum’s Global Risks Report takes a dim view of our hyper connected world. At the group’s annual meeting in Davos, Switzerland, members wrestled with the consequences of ubiquitous Internet connectivity, concluding that groups or individuals with few resources ar...
UBB Forum 7.5.6 Cross Site Scripting
Exploit Title: UBB Forum 7.5.6 Cross Site Scripting Date: 5.01.2012 Author: Sony Software Link: http://www.ubbcentral.com/ Google Dorks: intext:Powered by UBB.threads PHP Forum Software 7.5.6 Version: 7.5.6, maybe another version Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com Po...
Tianya, China's biggest online forum 40 million users data leaked
Tianya, China's biggest online forum 40 million users data leaked Tianya.cn, China's biggest online forum confirmed on Sunday that private information for 40 million users had been leaked, three days after the country's largest programmers' website CSDN reported a similar leak. Tianya is one of t...
Ubiquiti Networks AirOS RCE Vulnerability (Dec 2011) - Active Check
AirOS is prone to a vulnerability that let attackers execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a...
appRain CMF 0.1.5 - Multiple Web Vulnerabilities
Title: ====== appRain CMF v0.1.5 - Multiple Web Vulnerabilities Date: ===== 2011-12-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=362 VL-ID: ===== 362 Introduction: ============= appRain is one of the first officially released Opensource Content Management Framewor...
appRain CMF v0.1.5 - Multiple Web Vulnerabilities
Exploit for php platform in category web applications appRain CMF v0.1.5 - Multiple Web Vulnerabilities Introduction: ============= appRain is one of the first officially released Opensource Content Management Framework CMF. CMF is a new web engineering concept where CMS Content Management System...
Simple Machines Forum (SMF) 1.1.15 - fckeditor Arbitrary File Upload
Simple Machines Forum SMF 1.1.15 - fckeditor Arbitrary File Upload source: https://www.securityfocus.com/bid/50925/info Simple Machines Forum is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload...
Simple Machines Forum (SMF) 1.1.15 - 'fckeditor' Arbitrary File Upload
source: https://www.securityfocus.com/bid/50925/info Simple Machines Forum is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...
WSN Classifieds 6.2.12 / 6.2.18 Cross Site Scripting / SQL Injection
Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can ...
WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities
Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can ...
WSN Classifieds v.6.2.12 and 6.2.18 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE...
CVE-2011-4569
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
Sql injection
SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...
