Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

The CVE-2009-4349 entry describes a CSRF vulnerability in Link Up Gold 5.0 affecting the file path administration/administrators.php . The underlying issue allows remote attackers to hijack the authentication of administrators to create new administrative accounts. This is the explicit impact sta...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Link Up Gold CSRF - Create Administrator Account

Exploit for unknown platform in category web applications ================================================ Link Up Gold CSRF - Create Administrator Account ================================================ /\ == \ /\ \ /\ \ \ \ input type="h...

Viscacha 0.8 Gold persistant XSS vulnerability

No description provided by source. Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the contex...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Ipswitch WhatsUp Gold 8.03 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch...

Directory traversal

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magicquotesgpc is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the GLOBALSpage parameter...

CVE-2009-3823

CVE-2009-3823 describes a directory traversal vulnerability in Mobilelib GOLD 3.0, affecting the file myhtml.php. When magic_quotes_gpc is enabled, an attacker can read arbitrary files by supplying a dot-dot (“..”) sequence in the GLOBALS[page] parameter. The root cause is improper validation/san...

PT-2009-1115 · Microsoft · Server Service +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions Gold, SP1, and SP2 Microsoft Windows Server 2008 versions Gold and SP2 Description: The issue is related to the SMBv2 component in the Windows operating system, which is associated with resource management...

Ipswitch WhatsUp Gold DOS Device HTTP Request Denial of Service (CVE-2004-0799)

WhatsUp is a network management and monitoring application developed by Ipswitch Inc. It has a built-in web server to enable remote access to the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold processes a request that contains a special device nam...

CVE-2009-3530

Cross-site scripting XSS vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in storefront.php in RadScripts RadBids Gold 4 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

Sql injection

SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action, a different vector than CVE-2005-1074...

CVE-2009-3529

SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action, a different vector than CVE-2005-1074...

CVE-2009-3529

SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action, a different vector than CVE-2005-1074...

CVE-2009-3530

RadBids Gold 4 (RadScripts) is affected by a cross-site scripting (XSS) vulnerability in storefront.php via the mode parameter. The available sources (NVD, CVE listings) confirm the vulnerability but do not provide additional technical details such as affected versions beyond RadBids Gold 4, or c...

CVE-2009-3529

The CVE-2009-3529 entry concerns RadScripts RadBids Gold 4. Vulnerability : SQL injection in index.php triggered by the fid parameter in a view_forum action, enabling remote attackers to execute arbitrary SQL commands. This is a different vector than CVE-2005-1074. Impact : Partial confidentialit...