How Did One Of The World's Poorer Countries Become its Top Source of Online Attacks?

What country serves up the biggest share of online attacks? The U.S., you say? It’s the world’s largest and most advanced economy. China maybe? Its growing fast, with billions of citizens and hundreds of millions of Internet users. How about Russia? Try Myanmar. The southeast Asian country that’s...

Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

Joomla! 1.6.3 and lower | Multiple Cross Site Scripting XSS Vulnerabilities 1. OVERVIEW Joomla! 1.6.3 and lower are vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and...

PHP-Nuke 8.x Cross Site Scripting

PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...

PHP-Nuke 8.x Cross Site Request Forgery

PHP-Nuke 8.x = Cross Site Request Forgery CSRF / Anti-CSRF Bypass Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower versions are vulnerable to Cross Site Request Forgery CSRF because its Anti-CSRF mechanism Referer Check is found to be broken. 2. BACKGROUND PHP-Nuke is a Web Portal...

PHP-Nuke 8.x <= Cross Site Scripting Vulnerability

PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...

XOOPS 2.5.0 Cross Site Scripting

XOOPS 2.5.0 = Cross Site Scripting Vulnerability 1. OVERVIEW The XOOPS 2.5.0 and lower versions were vulnerable to Cross Site Scripting. 2. BACKGROUND XOOPS is an acronym of eXtensible Object Oriented Portal System. It's the 1 Content Management System CMS project on www.sourceforge.net and a...

Website critical of Myanmar regime hacked by unknown Hackers !

A Thailand-based news website critical of Myanmar's military government says it has been hacked by unknown attackers who posted fake articles on it. The Irrawaddy website is run by exiled Myanmar journalists. It said on its home page Sunday that it was trying to fix the problem and prevent furthe...

Vanilla Forums 2.0.17.1 ~ 2.0.17.5 <= Cross Site Scripting Vulnerability

OVERVIEW The Vanilla Forums 2.0.17.1 till 2.0.17.5 were vulnerable to Cross Site Scripting. 2. BACKGROUND Vanilla Forums are open-source, standards-compliant, customizable discussion forums. It is specially made to help small communities grow larger through SEO mojo, totally customizable social...

Zikula CMS 1.2.4 - Cross-Site Request Forgery

Zikula CMS 1.2.4 - Cross-Site Request Forgery Source: http://packetstormsecurity.org/files/view/98060/zikulacms-xsrf.txt ==================================================== Zikula CMS 1.2.4 = Cross Site Request Forgery CSRF Vulnerability ==================================================== 1...

Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability

==================================================== Zikula CMS 1.2.4 = Cross Site Request Forgery CSRF Vulnerability ==================================================== 1. OVERVIEW The Zikula 1.2.4 and lower versions were vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND Zikula is a...

Geeklog 1.7.1 Cross Site Scripting

========================================================= Geeklog 1.7.1 alert/XSS/&subgroup='"--alert/XSS/ /Request 6. SOLUTION Upgrade to 1.7.1sr1 7. VENDOR Geeklog Development Team http://www.geeklog.net/ 8. CREDIT This vulnerability was discovered by Aung Khant, http://yehg.net, YGN Ethical...

MyBB 1.6 SQL Injection

================================= MyBB 1.6 /search.php POST /mybb/search.php action=dosearch&forums=2&keywords='+or+'a'+'a&postthread=1 = /private.php POST /mybb/private.php mypostkey=&keywords='+or+'a'+'a&quicksearch=Search+PMs&allbox=Check+All&fromfid=0&fid=4&jumpto=4&action=dostuff 6. SOLUTION...

MyBB 1.6 Cross Site Scripting

============================================ MyBB 1.6 alert/XSS/&quotedids=&lastpid=1&frompage=1&tid=1&method=quickreply&message=test&previewpost=Preview Post 6. SOLUTION Upgrade to 1.6.1 7. VENDOR MyBB Development Team http://www.mybb.com/ 8. CREDIT This vulnerability was discovered by Aung Khan...

Week in Review: Mobile Madness, Firesheep Speaks Up, Myanmar Knocked Offline

The specter of politically motivated cyber attacks reared its head again this week, while closer to home, the names of two software giants: Google and Adobe were all over the headlines when it came to security this week, as several bugs were found…and fixed in the companies products. Read on for...

Massive Denial Of Service Attack Severs Myanmar From Internet

The nation of Myanmar, formerly known as Burma, found its access to the Internet severed by a massive denial of service attack, according to a report by Arbor Networks. The source or motivation of the attack isn’t known, but it is believed that the distributed denial of service DDoS attacks have...

Joomla! 1.5.20 <= Cross Site Scripting (XSS) Vulnerability

OVERVIEW The Joomla! web application was vulnerable to Cross Site Scripting vulnerability. 2. PRODUCT DESCRIPTION Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a model–view–controller MVC Web application...

QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)

OVERVIEW The QtWeb Browser application is vulnerable to Insecure DLL Hijacking Vulnerability. Similar terms that describe this vulnerability have been come up with Remote Binary Planting, and Insecure DLL Loading/Injection/Hijacking/Preloading. 2. PRODUCT DESCRIPTION QtWeb Browser is a...

Joomla BCAccount Cross Site Scripting

======================================================================================= Joomla! Component combcaccount Persistent Cross Script Scripting XSS Vulnerability ======================================================================================= 1. OVERVIEW The Joomla! Component...

phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability

============================================================================== phpMyAdmin 3.3.5 / 2.11.10 = Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The phpMyAdmin web application was vulnerable to Cross Site...

Several XSS vulnerabilities were found in the code.

PMASA-2010-5 Announcement-ID: PMASA-2010-5 Date: 2010-08-20 Summary Several XSS vulnerabilities were found in the code. Description It was possible to conduct a XSS attack using crafted URLs or POST parameters on several pages. Severity We consider this vulnerability to be serious. Mitigation...