224 matches found
ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability EMC Identifier: ESA-2012-031 CVE Identifier: CVE-2012-2283 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected products: Iomega network storage devices...
Scientific Linux Security Update : nss on SL4.x, SL5.x i386/x86_64
CVE-2009-3555 TLS: MITM attacks via session renegotiation A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handled session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session for exampl...
Andy's PHP Knowledgebase 0.95.5 Shell Upload
Exploit Title: aphpkb 0.95.5 Remote File Upload Date: 2011 Sep 21 Author: Black.Spook H4ckcity Security Team Software Link: http://prdownloads.sourceforge.net/aphpkb/aphpkb-0.95.5.tgz?download Version: 0.95.5 Tested on: Linux Email: [email protected] Steps to exploit this vulnerability: 1-...
CentOS Update for httpd CESA-2010:0168 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities
This host is running Andy's PHP Knowledgebase and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbaphpkbmultxssvuln.nasl 5840 2017-04-03 12:02:24Z cfi $ Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright...
iSupport 1.8 - SQL Injection
iSupport 1.8 - SQL Injection iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage: http://www.idevspot.com/iSupport.php Google Dork:...
Andy's PHP Knowledgebase Version Detection
The script detects the version of Andy SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902520";...
Andy's PHP Knowledgebase < 0.95.6 'step5.php' Remote PHP Code Execution Vulnerability - Active Check
Andy SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aphpkb:aphpkb"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902519";...
Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability
This host is running Andy's PHP Knowledgebase and is prone to remote PHP code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodaphpkbcodeexecvuln.nasl 5840 2017-04-03 12:02:24Z cfi $ Andy's PHP Knowledgebase 'step5.php' Remote PHP Code Execution Vulnerability Authors: Sooraj KS...
Andys PHP KnowledgeBase 0.95.4 - step5.php PHP Remote Code Execution
Andys PHP KnowledgeBase 0.95.4 - step5.php PHP Remote Code Execution source: https://www.securityfocus.com/bid/47918/info Andy's PHP Knowledgebase is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. Attackers...
Andy's PHP KnowledgeBase 0.95.4 - 'step5.php' PHP Remote Code Execution
source: https://www.securityfocus.com/bid/47918/info Andy's PHP Knowledgebase is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the...
CVE-2011-1546
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to 1 aviewusers.php or 2 keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 3 id...
Sql injection
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to 1 aviewusers.php or 2 keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 3 id...
CVE-2011-1546: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to 1 aviewusers.php or 2 keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 3 id...
CVE-2011-1555: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...
CVE-2011-1556: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase Aphpkb 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter...
'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)
'Andy's PHP Knowledgebase' SQL Injection Vulnerability CVE-2011-1546 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of the 's' query parameter. II. TESTED VERSION...
Andy's PHP Knowledgebase 0.95.2 (viewusers.php) SQL Injection
Exploit for php platform in category web applications I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of the 's' query parameter. II. TESTED VERSION --------------------------------------- 0.95.2 III. PoC EXPLOIT...
Andy's PHP Knowledgebase 's' Parameter SQL Injection Vulnerability
Andy SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aphpkb:aphpkb"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103135";...
Andy's PHP Knowledgebase 's' Parameter SQL Injection Vulnerability
Andy's PHP Knowledgebase is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i...