CVE-2010-1606: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...

CVE-2010-1605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in isearch.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 anyword and 2 cityname parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

NCT Social Networking Script Cross Site Scripting

Exploit Title: XSS in NCT Jobs Portal Script Date: 25-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : ------------------------------------------------------------------------ XSS in NCT Social Networking Script Vendor:http://www.ncrypted.net/...

NCT Jobs Portal Script - Cross-Site Scripting Authentication Bypass

NCT Jobs Portal Script - Cross-Site Scripting Authentication Bypass Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script Date: 24-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in NCT Jobs Portal Script Vendor:http://www.ncrypted.net/...

NCT Jobs Portal Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script Date: 24-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in NCT Jobs Portal Script Vendor:http://www.ncrypted.net/ Author:Sid3^effects Description : NCT Jobs Portal script is a web...

NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass

Exploit Title: XSS and Authentication bypass in NCT Jobs Portal Script Date: 24-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in NCT Jobs Portal Script Vendor:http://www.ncrypted.net/ Author:Sid3^effects Description : NCT Jobs Portal script is a web...

Joomla! Component JP Jobs 1.2.0 - id SQL Injection

Joomla! Component JP Jobs 1.2.0 - id SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla! Component JP Jobs 1.2.0 - 'id' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Sql injection

SQL injection vulnerability in the JP Jobs comjpjobs component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2010-1350

SQL injection vulnerability in the JP Jobs comjpjobs component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2010-1350

SQL injection vulnerability in the JP Jobs comjpjobs component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2010-1350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JP Jobs comjpjobs component 1.4.1 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

Softbiz Jobs / Recruitment Script (search_result.php) SQL Injection

Exploit for unknown platform in category web applications ================================================================================= Softbiz Jobs / Recruitment Script searchresult.php SQL Injection Vulnerability...

Softbiz Jobs And Recruitment SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Jobs & Recruitment Script SQL INJECTION searchresult.php +Autor : Easy Laster +Date : 10.03.2010 +Script : Softbiz Jobs & Recruitment Script +Download : ---------------- +Demo :...

Softbiz Jobs and Recruitment Script - search_result.php SQL Injection

Softbiz Jobs and Recruitment Script - searchresult.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Softbiz Jobs & Recruitment Script SQL INJECTION searchresult.php +Autor : Easy Laster +Date : 10.03.2010 +Script : Softbiz Jobs &...

Softbiz Jobs and Recruitment Script - 'search_result.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Jobs & Recruitment Script SQL INJECTION searchresult.php +Autor : Easy Laster +Date : 10.03.2010 +Script : Softbiz Jobs & Recruitment Script +Price : 129$ +Language :PHP +Discovered by Easy...

CVE-2010-0302

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service daemon crash or hang via a client...

[SECURITY] Fedora 11 Update: puppet-0.25.4-1.fc11

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

Sql injection

SQL injection vulnerability in newsdesc.php in Softbiz Jobs allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0758

The CVE-2010-0758 entry describes a SQL injection vulnerability in Softbiz Jobs, specifically in news_desc.php where the id parameter can be manipulated to cause arbitrary SQL execution. This affects the News description handling component and represents a remote, unauthenticated attack surface w...