Updated cacti package fixes security vulnerabilities

Multiple security issues cross-site scripting, cross-site request forgery, SQL injections, missing input sanitising have been found in Cacti CVE-2014-2326, CVE-2014-2328, CVE-2014-2708, CVE-2014-2709, CVE-2014-4002...

cacti security update

Package : cacti Version : 0.8.7g-1+squeeze4 CVE ID : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328 CVE-2014-2708 CVE-2014-2709 CVE-2014-4002 Debian Bug : 742768 743565 752573 Multiple security issues cross-site scripting, cross-site request forgery, SQL injections, missing input sanitising have been...

cacti security update

Package : cacti Version : 0.8.7g-1+squeeze4 CVE ID : CVE-2014-2326 CVE-2014-2327 CVE-2014-2328 CVE-2014-2708 CVE-2014-2709 CVE-2014-4002 Debian Bug : 742768 743565 752573 Multiple security issues cross-site scripting, cross-site request forgery, SQL injections, missing input sanitising have been...

SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections

No description provided by source. Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections Date: 13 July 2011 Author: jdc Software Link: http://www.sigsiu.net Version: 2.9.3.2 Fixed In: 2.9.4 Verified: http://www.sigsiu.net/changelog as Bugfix: Blind SQL injection Versions prior to...

Zero CMS 1.0 - Alpha Arbitrary File Upload / SQL Injection Vulnerabilities

No description provided by source. | | | / | |\ \ / | / |/ | | | | |/ \ | | / \ \ | \ \ | | | | | \ | |/ \ | | // | || | | | ||| /| / /\ | |||| | | /| / / | | Zero CMS Remote Arbitrary File Upload / SQL Injections | | Version: = 1.0 Alpha Last | | Vendor: www.zero-cms.com | | Discovered by:...

viart shop 4.0.5 - Multiple Vulnerabilities

No description provided by source. Title: ViArt SHOP multiple vulnerabilities Date: 18.11.2010 Author: Ariko-Security Software Link: http://www.viart.com Version: 4.0.5 ============ Ariko-Security - Advisory 2/11/2010 ============= ViArt SHOP multiple vulnerabilities Vendor's Description of...

MyFirstCMS <= 1.0.2 - Remote Arbitrary File Delete Vulnerability

No description provided by source. --+++==========================================================================+++-- --+++========== MyFirstCMS = 1.0.2 Remote File Delete Vulnerability ==========+++-- --+++==========================================================================+++-- + Author...

InoutMailingListManager <= 3.1 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo InoutMailingListManager = 3.1 Command Execution Exploit + Login Retrieve + Advisory by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love ; if $argc4...

phpCommunityCalendar <= 4.0.3 - Multiple (XSS/SQL) Vulnerabilities

No description provided by source. phpCommunityCalendar 4.0.3 Multiple Vulnerabilites author : X0r1 release : 23.05.06 software : http://www.appideas.com/ googledork : Calendar progr...

blogcms 4.2.1b (sql/xss) Multiple Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public...

X-Forum 0.6.2 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin, Osirys...

Hiverr 2.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Hiverr v2.2 Multiple Vulnerabilities Date: 05.02.2013 Author: xStarCode Exploit Author: xStarCode Version: 2.2 Category: webapps Google Dork: Tested on: Linux Exploit: -----Index Vulnerabilities: == SQL Injections...

Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25094/info Bandersnatch is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include multiple SQL-injections vulnerabilities and an HTML-injecti...

Easy Blog by JM LLC - Multiple Vulnerabilities

No description provided by source. Dear Offensive Security, I have discovered some vulnerabilities in Easy Blog, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ============================================== Easy Blog by JM LLC - Multiple Vulnerabilities...

joomla live chat (sql/proxy) Multiple Vulnerabilities

No description provided by source. Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the...

D-Link DIR-605 CSRF Vulnerability

No description provided by source. Exploit Title: D-Link DIR-605 CSRF Vulnerability Date: 20-03-2012 Author: iqzer0++ Version: Firmware Version : 2.00 Tested on: DIR-605 This allows unauthroized access to the device and post injections html form name=bypass action=...

lightneasy sqlite / no database <= 1.2.2 - Multiple Vulnerabilities

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 14/04/08 CMS: LightNEasy SQLite / no database = 1.2.2 Site: lightneasy.org Advisory: Multiple Remote Vulnerabilities Need: magicquotesgpc = Off magicquotesgpc = On / Off for SQL Injections Bug 1: Remote File...

Basic Forum by JM LLC - Multiple Vulnerabilities

No description provided by source. Dear Offensive Security, I have discovered some vulnerabilities in Basic Forum, developed by JM LLC. Best regards, Sp3ctrecore ADVISORY ================================================ Basic Forum by JM LLC - Multiple Vulnerabilities...

Pixie CMS 1.01 - 1.04 - Blind SQL Injections

No description provided by source. Exploit Title: Pixie CMS 1.01 - 1.04 pixieuser Blind SQL Injection Google Dork: None Date: 11/14/2011 Author: Piranha, piranhaattorontomail.com Software Link: http://www.getpixie.co.uk/ Version: 1.01 - 1.04 Tested on: Windows XP SP3, Pixie versions: 1.01 - 1.04...

Sitecom MD-25x Multiple Vulnerabilities Reverse Root Shell Exploit

No description provided by source. !/usr/bin/python Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link:...