1267 matches found
SQL-Ledger – several vulnerabilities
============================================ ||| Security Advisory AKLINK-SA-2009-001 ||| ||| CVE-2009-3580 CVE candidate ||| ||| CVE-2009-3581 CVE candidate ||| ||| CVE-2009-3582 CVE candidate ||| ||| CVE-2009-3583 CVE candidate ||| ||| CVE-2009-3584 CVE candidate |||...
[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability
============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...
QuiXplorer 2.41beta LFI / Traversal / Code Execution
============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...
Simple PHP Blog 0.5.1 Local File Inclusion
============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...
F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...
Family Connections <= 2.1.3 Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file include LFI issue, an arbitrary file-upload issue, and multiple SQL injection SQLi issues. These issues occur because the application fails to properly sanitize user-supplied input...
Family Connections Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...
Invision Power Board < 3.0.5 Multiple Vulnerabilities
The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...
Invision Power Board < 3.0.5 Multiple Vulnerabilities (deprecated)
Binary data 5260.prm...
Invision Power Board Local File Include and SQL Injection Vulnerabilities
Invision Power Board is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
Invision Power Board Local File Include Vulnerabilities
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the webserver process. Information harvested may aid in further attacks. Invision Power Services Invision Power Board 2.3.6 Invision Power...
klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion
klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow...
klinza Professional CMS 5.0.1 - 'menulast.php' Local File Inclusion
source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...
Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities
Basic Analysis and Security Engine BASE is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include an SQL-injection issue, a cross-site scripting issue, and a local file-include issue. SPDX-FileCopyrightText: 20...
Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities
Basic Analysis and Security Engine BASE is prone to multiple input- validation vulnerabilities because it fails to adequately sanitize user- supplied input. These vulnerabilities include an SQL-injection issue, a cross-site scripting issue, and a local file-include issue. Exploiting these issues...
OpenSolution Quick.Cart - Local File Inclusion Cross-Site Scripting
OpenSolution Quick.Cart - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/42182/info Quick.Cart is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attack...
FlatPress 0.804 - 0.812.1 LFI Vulnerability
FlatPress is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FlatPress 'userid' Parameter Local File Include Vulnerability
FlatPress is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow th...
cour supreme 'index.php' SQL Injection & Local File Include Vulnerability
================================================= Discovered By: CrAzY CrAcKeR Email: CrAzYCrAcKeRathotmaildotcom ================================================ example:- http://www.example.in/index.php?p=affichedecision&id=-669 union select 1,2,3,4,5,6,loadfile'/etc/passwd',8+from+mysql.user...
Arbitrary File Upload vulnerability in TinyBrowser
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Arbitrary File Upload уязвимости в TinyBrowser - файл менеджере для редактора TinyMCE. Arbitrary File Upload: http://site/path/tinybrowser.php?type=file При доступе к TinyBrowser, доступ к которому не ограничивается, можно загрузить через встроенн...