1886 matches found
Vulnerabilities in WP-Cumulus for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине WP-Cumulus для WordPress. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
CuteNews 1.4.6 - from_date_day Full Path Disclosure
CuteNews 1.4.6 - fromdateday Full Path Disclosure source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues...
Vulnerabilities in Pigalle
Hello 3APA3A! I want to warn you about multiple security vulnerabilities in Pigalle. These are Information Leakage, Full path disclosure and Cross-Site Scripting vulnerabilities. Information Leakage: http://site/index.php Versions of PHP, MySQL and web server are shown in meta-tags in source of a...
PBBoard <=2.0.2 Full Path Disclosure
No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard 2.0.2 - Full Path Disclosure
PBBoard 2.0.2 - Full Path Disclosure AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the...
PBBoard <= 2.0.2 - Full Path Disclosure
Exploit for unknown platform in category web applications ====================================== PBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ????? ± ??±???!'; ================ ================ 2. Full Path Disclosure...
[Advisory]PBBoard <=2.0.2 Full Path Disclosure
AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products: ---------------------------- test on...
PBBoard 2.0.2 - Full Path Disclosure
AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the real path of the server side script...
[MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure
MajorSecurity Advisory 59PHP =5.3 - mysqlirealescapestring full path disclosure Details ======= Product: PHP =5.3 Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
[MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure
MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
PHP 5.3 - preg_match() Full Path Disclosure
PHP 5.3 - pregmatch Full Path Disclosure MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============...
PHP <=5.3 - preg_match() full path disclosure
No description provided by source. MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
PHP <=5.3 - preg_match() full path disclosure
Exploit for unknown platform in category remote exploits ============================================= PHP =5.3 - pregmatch full path disclosure ============================================= Title: PHP =5.3 - pregmatch full path disclosure CVE-ID: OSVDB-ID: Author: David Vieira-Kurz Published:...
PHP 5.3 - 'preg_match()' Full Path Disclosure
MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
Vulnerabilities in FileDownload Snippet for MODx
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Directory Traversal и Full path disclosure уязвимостях в FileDownload Snippet для MODx. Directory Traversal: http://site/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=../index.php Данная уязвимость может использоваться для...
Vulnerabilities in Dumb math captcha for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Full path disclosure уязвимостях в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: Капча на страницах записей уязвима к Constant values bypass method, который я описал в проекте Month of Bugs i...
CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. CSRF: http://site/xampp/cds-fpdf.php It's possible to delete or add data in test table as via CSRF, and as via Insufficient...
Cross-Site Scripting, CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP which I found at 23.06.2009. These are Cross-Site Scripting, Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. XSS:...
[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple Full Path Disclosure vulnerabilities
============================================= INTERNET SECURITY AUDITORS ALERT 2009-009 - Original release date: July 21st, 2009 - Last revised: July 23rd, 2009 - Discovered by: Juan Galiana Lara - Severity: 5/10 CVSS Base Score ============================================= I. VULNERABILITY...
Vulnerabilities in CMS SiteLogic
Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Full path disclosure и Cross-Site Scripting уязвимостях в CMS SiteLogic. SQL Injection: http://site/index.php?mid=-120union20select201,1,version,1,1,1,1,1 Full path disclosure: http://site/index.php?mid=’ http://site/includes/stat.p...