Agora Project 2.13.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublish...

agora project 2.13.1 - Multiple Vulnerabilities

Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublished CVE reference. Not yet assigned Download...

Agora-Project 2.12.11 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: agora-project2.12.1112-2011 Remote Shell Upload Google Dork: n0 N0obs Date: 10/06/2012 Exploit Author: Misa3l Vendor Homepage: http://sourceforge.net/projects/agora-project/ Software Link:...

C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability

Exploit for asp platform in category web applications Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und Kommunikationslösung von C4B. Sie ist leicht zu bedienen und...

Tiki Wiki 5.2 CMS Groupware File Disclosure

File disclosure vulnerability in Tiki Wiki CMS Groupware tiki-jsplugin.php language parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

GroupWare epesiBIM CRM 1.2.1 Cross Site Scripting

Title: ====== GroupWare epesiBIM CRM 1.2.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=501 VL-ID: ===== 501 Introduction: ============= epesi BIM stands for Business Information Manager. We just did not like the...

GroupWare epesiBIM 1.2.1 - Multiple Web Vulnerabilities

Document Title: =============== GroupWare epesiBIM 1.2.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=501 Release Date: ============= 2012-04-09 Vulnerability Laboratory ID VL-ID: ==================================== 501...

Egroupware 1.8.002 Cross Site Scripting

Egroupware v1.8.002 processexec.php Reflected Cross-Site Scripting XSS Google Dork: inurl:etemplate/processexec.php Title: Egroupware v1.8.002 processexec.php Remote XSS Vulnerability Type: Remote Author: Marcos Garcia Severity: Medium – CVSS: 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Impact: Direct execution...

Tiki Wiki CMS Groupware Frame Injection

Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Tiki Wiki CMS Groupware - url Open Redirection

Tiki Wiki CMS Groupware - url Open Redirection source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...

Horde Groupware Source Packages Backdoor Vulnerability - Active Check

Horde Groupware is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware";...

Horde Groupware Source Packages Backdoor Vulnerability

Horde Groupware is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Successful attacks will compromise the affected application. Horde Groupware versions 1.2.10 between November 2, 2011, and February 7, 2012, are...

Simple Groupware 0.742 - export Cross-Site Scripting

Simple Groupware 0.742 - export Cross-Site Scripting source: https://www.securityfocus.com/bid/51882/info Simple Groupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

Simple Groupware 0.742 - 'export' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51882/info Simple Groupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Tiki Wiki CMS Groupware 8.2 RCE

Tiki Wiki CMS Groupware RCE pregreplace snarfajax.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

CVE-2012-0791

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...

CVE-2012-0909

Cross-site scripting XSS vulnerability in HordeForm in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to email verification. NOTE: Some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...

CVE-2012-0791

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 composeCache, 2 rtemode, or 3 filename parameters to the compose page; 4 formname parameter to the...