Debian DSA-1986-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4297 Multiple cross-site request forgery CSRF vulnerabilities have been discovered. - CVE-2009-4298 It has be...

DECT标准密码加密绕过漏洞

Bugraq ID: 38152 DECT是数字增强型无线通讯标准。 DECT标准密码DSC加密标准存在加密绕过问题，允许攻击者恢复密钥。 攻击者可以利用漏洞破解DSC加密算法，然后读取无线设备发送到基站的加密数据，允许攻击者获得敏感信息。 针对DECT标准密码的分析将在FSE2010会议上演讲。总的来说可以在PC上在几分钟内恢复DSC的密钥，但是需要几小时获取足够多的密钥流。 DECT Forum DECT 目前没有解决方案提供： http://www.dect.org/index.aspx...

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...

ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

fipsForum v2.6 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================= fipsForum v2.6 Remote Database Disclosure Vulnerability ======================================================= » fipsForum v2.6 Remote Database Disclosure Vulnerability...

Unfixed XSS vulnerability at www.worldwaterforum5.org

Security researcher FayHatti, has submitted on 02/06/2010 a cross-site-scripting XSS vulnerability affecting www.worldwaterforum5.org, which at the time of submission ranked 688727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It ...

South Korea gnuboard Forum vulnerability EXP and the use of method-vulnerability warning-the black bar safety net

The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection EXP: Copy the code ? php echo"...

fipsForum 2.6 Database Disclosure

============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...

NovaBoard Detection

This host is running NovaBoard, an Open Source forum solution. OpenVAS Vulnerability Test $Id: novaboarddetect.nasl 5737 2017-03-27 14:18:12Z cfi $ NovaBoard Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can redistribute it...

NovaBoard Detection

This host is running NovaBoard, an Open Source forum solution. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Silverstripe <= v2.3.4: two XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the...

Silverstripe <= v2.3.4: XSS vulnerabilities

No description provided by source. Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL'...

Cback V3 Forum Cross Site Scripting

oo Cback v3 forum oo Download: http://www.cback.de/downloads.php Price 79 Eur oo Vendor: www.cback.de oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/viewtopic.php?t=Xss oo Demo:...

Silverstripe CMS 2.3.4 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...

Blaze Apps Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Network fun online shopping system fashion version v9. 7 background to really get the shell-vulnerability warning-the black bar safety net

Under the latest 2 0 0 9-1 2-2 2 just came out of the see online are only injected, no real take the shell on! The study of the following Web fun contains Forum, the forum for YXBBS it! YxBBs 2.3 For Access version! yxbbs the original Station data on the backup is there, and the fun is removed! S...

CityShop v5. 5. 8 sql injection 0day&background get the webshell method-vulnerability warning-the black bar safety net

Text/My5t3ry Saw yesterday on the Forum a friend asked CitySHOP background how to get a SHELL, just under the source code back to read the next, find the code with the zend encryption. The decryption after the reading, the vulnerability also really many, many parameters are$GET straight into the...

Founder of DarkMarket Faces Hefty Jail Time

A former London pizza delivery man, Renukanth Subramaniam, 33, faces a 10-year prison sentence after admitting he helped found the notorious DarkMarket forum for computer crime. Read the full article. The Register...

TribisurCMS Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Tribute to the martyrs of...

Alpha B Forum Cross Site Scripting

============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...