Collabtive Detection

This host is running Collabtive, a Project Management and Open Source Groupware. OpenVAS Vulnerability Test $Id: gbcollabtivedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Collabtive Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; y...

ki Wiki CMS groupware local file include and cross-site scripting vulnerability-vulnerability warning-the black bar safety net

The attacker can through the browser to exploit these issues. The use of a cross-site scripting issues, an attacker must entice an unsuspecting user to click on a malicious URI. The local file vulnerability EXP: the http:// 网站...

Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/43507/info Tiki Wiki CMS Groupware is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using...

Tiki Wiki CMS Groupware 5.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Tiki Wiki CMS Groupware 5.2 Vulnerability...........Reflected Cross-site Scripting Download................htp://www.tiki.org Release Date............9/24/2010 Tested On...............Windows Vista +...

Tiki Wiki CMS Groupware 5.2 Cross Site Request Forgery

...

Group-Office Detection

This host is running Group-Office, a PHP based dual license commercial/open source groupware product developed by Dutch company Intermesh. OpenVAS Vulnerability Test $Id: gbgroupofficedetect.nasl 5723 2017-03-24 15:46:34Z cfi $ Group-Office Detection Authors: Michael Meyer Copyright: Copyright c...

Group Office - comment_id SQL Injection

Group Office - commentid SQL Injection Title Group Office Remote SQL Injection Vulnerability Author ADEO Security Published 17/07/2010 Version 3.5.9 Possible all versions Vendor http://www.group-office.com Download...

BrightSuite Groupware SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

BrightSuite Groupware - SQL Injection

BrightSuite Groupware - SQL Injection 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

BrightSuite Groupware SQL Vulnerable

Exploit for asp platform in category web applications ==================================== BrightSuite Groupware SQL Vulnerable ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

BrightSuite Groupware - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Ceica Groupware 1.5 Shell Upload

Tilte: Ceica Groupware 1.5 Remote File Upload Vulnerability Date....................: 03-06-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Ceica Groupware 1.5 Site Software ..........:...

CVE-2010-1135

The userlogout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse...

Sql injection

SQL injection vulnerability in the find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable...

Design/Logic Flaw

The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php...

Sql injection

Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to 1 tiki-searchindex.php and 2 tiki-searchresults.php...

Design/Logic Flaw

The userlogout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse...

CVE-2010-1135

The CVE-2010-1135 issue affects Tiki Wiki CMS/Groupware 4.x prior to 4.2 . The root cause is the user_logout function failing to properly delete user login cookies , allowing a remote attacker to gain access via cookie reuse. Impact is authenticated access through cookie replay, with partial conf...

CVE-2010-1133

Tiki Wiki CMS Groupware is affected by multiple SQL injection vulnerabilities in the 4.x series prior to 4.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors, with likely exploitation paths through tiki-searchindex.php and tiki-searchresults.php. Impact per sou...

CVE-2010-1135

The userlogout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse...