601 matches found
PT-2011-2511
Name of the Vulnerable Software and Affected Versions libwww-perl LWP versions prior to 6.00 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks by spoofing servers due to inadequate validation of SSL certificates when the If-SSL-Cert-Subject header is not set...
If-CMS 2.07 Pre-Auth local file inclusion vulnerability and a fix-vulnerability warning-the black bar safety net
If-CMS is a free open source content management system If-CMS is the presence of local file inclusion vulnerability that may lead to sensitive information disclosure. +info: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit +poc: !/ usr/bin/python INFORMATION Exploit Title: If-CMS 2.07...
If-CMS 2.07 Local File Inclusion
!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...
If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit
Exploit for php platform in category web applications !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off impo...
IF-CMS 2.07 - Local File Inclusion (1)
!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...
IF-CMS 2.07 - Local File Inclusion (1)
IF-CMS 2.07 - Local File Inclusion 1 !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in an olsrd.xml action to pkgedit.php, 2 the xml parameter to pkg.php, or the if parameter to 3 statusgraph.php or 4 interfaces.php, a differe...
CVE-2010-1717
Directory traversal vulnerability in the iF surfALERT comifsurfalert component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...
CVE-2010-1717
The connected NUCLEI template confirms CVE-2010-1717 affects the Joomla! component iF surfALERT (com_if_surfalert) version 1.2, with a Local File Inclusion via a directory traversal in the controller parameter to index.php. This vulnerability allows an attacker to read arbitrary server files and ...
CVE-2010-1717: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the iF surfALERT comifsurfalert component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...
CVE-2009-4679: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...
Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion
Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...
Xitami 2.5c2 Web Server If-Modified-Since Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Xitami 2.5c2...
CVE-2009-4057
The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...
CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...
Joomla! sql injection vulnerability-vulnerability warning-the black bar safety net
Joomla! the iF Portfolio Nexus Component ’id’ sql injection vulnerability The following example URIs are available: http://www.example.com/services/portfolio?view=item&;id=-100%20union%20all%20select%2 0 1,version%2 8%29,3,4,5,6,7,...
Joomla! Extension iF Portfolio Nexus - SQL Injection
Joomla! Extension iF Portfolio Nexus - SQL Injection 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...
Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-528-1
Ubuntu Update for Linux kernel vulnerabilities USN-528-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5281.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-528-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
