9913 matches found
CVE-2009-4342
SQL injection vulnerability in the Job Exchange jobexchange extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2009-4342
CVE-2009-4342: A SQL injection vulnerability affects the TYPO3 Job Exchange extension (version 0.0.3). The root cause is an SQL injection path in the Job Exchange component, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. Impact is described with partial confident...
CVE-2009-4342
SQL injection vulnerability in the Job Exchange jobexchange extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2009-4342: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Job Exchange jobexchange extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
Pre Job Board 1.0 SQL Bypass Vulnerability
No description provided by source. Title: Pre Job Board 1.0 SQL Bypass Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.preprojects.com/jobs.asp Version : 1.0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
Pre Job Board 1.0 - Authentication Bypass
Pre Job Board 1.0 - Authentication Bypass Title: Pre Job Board 1.0 SQL Bypass Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.preprojects.com/jobs.asp Version : 1.0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
Pre Job Board 1.0 - Authentication Bypass
Title: Pre Job Board 1.0 SQL Bypass Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.preprojects.com/jobs.asp Version : 1.0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...
ZeeJobSite PHP Job Portal XSS
x Author: Andrea Bocchetti x Contact: [email protected] x Homepage : www.geekit.it // Software Info x Name : ZeeJobsite - PHP Job Portal x Vendor : http://www.zeejobsite.com/ x Version : v3x x Price : 149.00 USD...
ZeeJobsite v3x - PHP Job Portal XSS Attack Vulnerability
No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + ZeeJobsite v3x XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage : www.ssteam.ws...
ZeeJobSite 3x Cross Site Scripting
/\ == \ /\ \ /\ \ \ \ alert/XSS/ ------------------------------------------------------------------------------------------ Demo : + http://jobsite.65m.com/basicsearchresult.php?title=alert/XSS/ ------------------------------------------------------------------------------------------- EOF...
Joomla Job SQL Injection
view source print? / ! Joomla Component comjob showMoreUse SQL injection vulnerability ! Author : Palyo34 ! Homepage: http://www.1923turk.biz ! Date : 12 08, 2009 / + Manas58 + Topunuzun a.q + aponun picleri + + + 7 KAHRAMAN fiEHâºDâºMâºZ⺠SAYGIYLA ANIYORUZ ALLAH RAHMET EYLESâºN...
cups: Several XSS flaws in forms processed by CUPS web interface
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...
DEBIAN-CVE-2009-2820
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...
HP-UX LPD Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP-UX LPD...
Guardian Jobs Site Hacked, Data Stolen
In what is being described as a “deliberate and sophisticated crime,” the Guardian newspaper in the U.K. says the careers section of its Web site was hacked, exposing sensitive data belonging to about half a million users. According to a note posted online by the Guardian: The police remain anxio...
How to Protect Your Resume From Identity Theft
“Job candidates are willing in this market to give any information they can that would help them get a job,” said Ellen B. Vance, an HR consultant and auditor who advises companies on how to safeguard applicant and employee information. The instinct is natural, but it can leave you vulnerable to...
lftp security update
CentOS Errata and Security Advisory CESA-2009:1278 An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file...
Unrestricted file upload
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...
CVE-2008-6931
CVE-2008-6931 concerns an unrestricted file upload vulnerability in PHPStore Job Search (PHPCareers) . The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file under...
CVE-2008-6931
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...