CVE-2009-3583

Directory traversal vulnerability in the Preferences menu item in SQL-Ledger 2.8.24 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the countrycode field...

eUploader PRO 3.1.1 XSRF / XSS

----------------------------------------------------------------------------------------------- Title: eUploader PRO 3.1.1 XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16. December 2009...

eUploader PRO 3.1.1 (XSRF/XSS) Multiple Vulnerability

Exploit for unknown platform in category web applications ======================================================= eUploader PRO 3.1.1 XSRF/XSS Multiple Vulnerabilities =======================================================...

Ez Cart Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities

Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...

CF Shopkart 5.3x (itemid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ CF Shopkart 5.3x itemid Remote SQL Injection Vulnerability ============================================================ CF ShopKart SQL vulnerability By learn3r hacker from Nepal...

IBM Lotus Notes Version Detection (Linux)

This script detects the installed version of IBM Lotus Notes and sets the result in KB item. OpenVAS Vulnerability Test $Id: secpodibmlotusnotesdetectlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ IBM Lotus Notes Version Detection Linux Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

CVE-2008-7060

Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...

Flashden Guestbook phpinfo Disclosure

Cyber-Warrior & Security | Bug Researchers Group Application Name : Flashden Guestbook 29905 Vulnerable Type : phpinfo Disclosure Vulnerability Infection : PHP Info Get... author : Septemb0x WebSite : http://flashden.net/item/guestbook/29905 Demo :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...

CVE-2008-6208

Cross-site scripting XSS vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the 1 authorname, 2 itemtitle, and 3 item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-6208

Cross-site scripting XSS vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the 1 authorname, 2 itemtitle, and 3 item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-6208: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the 1 authorname, 2 itemtitle, and 3 item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-6050: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tech Articles comtecharticle 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the item parameter to index.php...

Unfixed XSS vulnerability at www.b3xjnh.com

Security researcher sovietw0rm, has submitted on 12/07/2008 a cross-site-scripting XSS vulnerability affecting www.b3xjnh.com, which at the time of submission ranked 7465712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is...

CVE-2008-4423: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action...

CVE-2008-4328: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

Memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the layout engine and 1 a zero value of the "this" variable in the...

CVE-2008-4063

CVE-2008-4063 affects Mozilla Firefox 3.x up to 3.0.2. The issue involves memory corruption in the layout engine via multiple vectors: (1) this==0 in nsContentList::Item, (2) Hindi/Indic IME interaction with the g key, and (3) inline frame protection when SortByContentOrder is invoked. Impact is ...