468 matches found
vBulletin 4.1.12 SQL Information Disclosure
TITLE ....... vBulletin 4.1.12 - sql information leak for logged-in users DATE ........ 03.05.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. Wh...
vBulletin 4.1.12 Path Disclosure
TITLE ....... vBulletin 4.1.12 - information disclosure for logged in users DATE ........ 30.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://vbulletin.com VERSION ..... TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is thi...
SENCHA SNS vulnerable to cross-site request forgery
Overview SENCHA SNS contains a cross-site request forgery vulnerability. SENCHA SNS is an open source SNS software. SENCHA SNS contains a cross-site request forgery vulnerability. Hiroshi Tokumaru of HASH Consulting Corp. reported this vulnerability to IPA. JPCERT/CC coordinated with the develope...
Aipo vulnerable to SQL injection
Overview Aipo contains SQL injection vulnerability. Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-office blogging. Aipo contains a SQL injection vulnerability. Impact Contents that are managed by Aipo may be viewed by a user that can login to Aipo. Solution...
nrpe-enum NSE Script
Queries Nagios Remote Plugin Executor NRPE daemons to obtain information such as load averages, process counts, logged in user information, etc. This script attempts to execute the stock list of commands that are enabled. User-supplied arguments are not supported. Script Arguments nrpe-enum.cmds ...
Warn about assigning "Anyone" group in Global and Project permissions
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-18076. panel Assigning anyone to global permissions such as a "Browse user" is a sure way to shoot yourself in the foot inadvertently. We ma...
Debian DSA-1439-1 : typo3-src - missing input sanitising
Henning Pingel discovered that TYPO3, a web content management framework, performs insufficient input sanitising, making it vulnerable to SQL injection by logged-in backend users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
