KF Web Server 3.2.0 Remote Contents Change

Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1 http://127.0.0.1:9727/index.wkf?opmenu=2 Edit general...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

KF Web Server v3.2.0 Remote Contents Change Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: KF Web Server Version: 3.2.0 Download: http://keyfocus.net/kfws/download/kfws32.exe Vulnerability Info: Type: Remote Contents Change Risk: Medium Vulnerability: http://127.0.0.1:9727/index.wkf?opmenu=1...

Parallels System Automation (PSA) Local File Inclusion

No description provided by source. Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Parallels System Automation (PSA) Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://www.cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd...

Parallels System Automation (PSA) - Local File Inclusion

Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: https://cp.site.com/servlet/Help?systemid=pem&booktype=login&helpid=changepassword&locale=/../../../../../../etc/passwd%00 Discoverd By:...

Parallels System Automation (PSA) - Local File Inclusion

Parallels System Automation PSA - Local File Inclusion Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

CuteSITE CMS 1.5.0 SQL Injection

Vulnerability ID: HTB22396 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

boastMachine 3.1 Cross Site Scripting

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Phreebooks 2.0 - Directory Traversal

Phreebooks 2.0 - Directory Traversal Advisory Name: Directory Traversal in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Directory Traversal Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0 Affected Platforms: Any running Phreebooks v2.0 Local / Remote: Remote...

Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Permanent Cross-site Scripting Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0...

XSS vulnerability in CuteSITE CMS

Vulnerability ID: HTB22397 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

XSS vulnerability in boastMachine

Vulnerability ID: HTB22399 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinboastmachine.html Product: boastMachine Vendor: Kailash Nadh Vulnerable Version: 3.1 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Solaris 8 (x86) : 109319-40

SunOS 5.8x86: suninstall Patch. Date this patch was last updated by Sun : Aug/13/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Joomla Component com_xmap Sql Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Joomla Component comxmap Sql Injection Vulnerability ===================================================== Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql...

Solaris 8 (x86) : 119820-03

SunOS 5.8x86: /usr/lib/nfs/nfslogd patch. Date this patch was last updated by Sun : May/27/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

XSS vulnerability in GetSimple CMS

Vulnerability ID: HTB22375 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms.html Product: GetSimple CMS Vendor: Cagintranet Networks Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SQL injection vulnerability in LiSK CMS

Vulnerability ID: HTB22373 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinliskcms1.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

XSS vulnerability in LiSK CMS

Vulnerability ID: HTB22374 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinliskcms.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting Vendor...