IL, DoS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Information Leakage, Denial of Service и Full path disclosure уязвимости. Information Leakage WASC-13: http://site/CFIDE/componentutils/packagelist.cfm Утечка списка всех компонентов установленных на серве...

Code Execution and FPD vulnerabilities in Simple:Press Forum for WordPress

Hello 3APA3A! I want to warn you about multiple security vulnerabilities in plugin Simple:Press Forum for WordPress. These are Code Execution and Full path disclosure vulnerabilities. Code Execution WASC-31: Execution of arbitrary code is possible via TinyBrowser. As I already told concerning...

Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting and Full Path Disclosure. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.11.5 and below Vulnerability Type:...

Concrete5 <= 5.4.2.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link:...

XSS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Cross-Site Scripting и Full path disclosure уязвимости. XSS WASC-08: http://site/CFIDE/componentutils/componentdetail.cfm?component=3Cbody20onload=alertdocument.cookie3E...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple full path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplefpdvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities Authors: Sooraj KS...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities (Sep 2011)

Adobe ColdFusion is prone to multiple full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion 7 Cross Site Scripting

Hello list! I want to warn you about new security vulnerabilities in Adobe ColdFusion. These are Cross-Site Scripting and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Adobe ColdFusion 7 and previous versions to XSS, an...

Xataface WebAuction and Xataface Librarian DB - Multiple Vulnerabilities

Title : Xataface WebAuction and Xataface Librarian DB Multiple Vulnerabilities. Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://xataface.com/ Advisory : http://secpod.org/blog/?p=350 http://secpod.org/advisories/SECPODXatafaceWebauctionMultVuln.txt Software : Xataface...

Xataface WebAuction and Xataface Librarian DB Multiple Vulnerabilities

Exploit for php platform in category web applications Title : Xataface WebAuction and Xataface Librarian DB Multiple Vulnerabilities. Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://xataface.com/ Advisory : http://secpod.org/blog/?p=350...

Cachelogic Expired Domains Script Multiple Vulnerabilities

Cachelogic Expired Domains script is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BrewBlogger 2.8.2 Cross Site Scripting / SQL Injection

BrewBlogger 2.3.2 multiple security vulnerabilities Date: 2011-06-23 Author: Brendan Coles / / Advisory: http://itsecuritysolutions.org/2011-06-23BrewBlogger2.3.2multiplesecurityvulnerabilities/ Software: BrewBlogger Version: 2.3.2 Club Edition and Personal Edition Homepage:...

BrewBlogger 2.3.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Date: 2011-06-23 Author: Brendan Coles email protected Software: BrewBlogger Version: 2.3.2 Club Edition and Personal Edition Homepage: http://www.brewblogger.net/ Source:...

BrewBlogger 2.3.2 - Multiple Vulnerabilities

BrewBlogger 2.3.2 multiple security vulnerabilities Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23BrewBlogger2.3.2multiplesecurityvulnerabilities/ Software: BrewBlogger Version: 2.3.2 Club Edition and Personal Edition Homepage: http://www.brewblogger.ne...

BrewBlogger 2.3.2 - Multiple Vulnerabilities

BrewBlogger 2.3.2 - Multiple Vulnerabilities BrewBlogger 2.3.2 multiple security vulnerabilities Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23BrewBlogger2.3.2multiplesecurityvulnerabilities/ Software: BrewBlogger Version: 2.3.2 Club Edition and Persona...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/...

Cachelogic Expired Domains Script 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles alert1alert1p+" SQL Injection: http://localhost/PATH/index.php?nemail protected@version,null,null-- 0day.today 2018-01-03...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/ Software: Cachelogic Expired Domains Script Version: alert1alert1p+"...

Burning Board 3.1.5 Full Path Disclosure

Exploit for php platform in category web applications --------------------------------------------------------------------- Exploit Title : Burning Board 3.1.5 Full Path Disclosure --------------------------------------------------------------------- Author : linc0ln.dll Date : 19/06/11 Site :...

Burning Board 3.1.5 - Full Path Disclosure

--------------------------------------------------------------------- Exploit Title : Burning Board 3.1.5 Full Path Disclosure --------------------------------------------------------------------- Author : linc0ln.dll Date : 19/06/11 Site : http://linc0ln.pl/ @ : linc0lnate-o-u.org...