CVE-2009-4679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Joomla If Nexus Local File Inclusion

\|/// \ - - // @ @ ----oOOo---oOOo--------------------------- @=Author : Fl0riX @=Greez : Deep-Power ,Pyske & All Friends ---------------Ooooo------------------------- ooooO / / \ \ @=======================================@ @=Script :Joomla Component comifnexus...

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...

CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...

Joomla! sql injection vulnerability-vulnerability warning-the black bar safety net

Joomla! the iF Portfolio Nexus Component ’id’ sql injection vulnerability The following example URIs are available: http://www.example.com/services/portfolio?view=item&;id=-100%20union%20all%20select%2 0 1,version%2 8%29,3,4,5,6,7,...

Joomla! Extension iF Portfolio Nexus - SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla Ext. iF Portfolio Nexus SQL injection

Exploit for unknown platform in category web applications ============================================ Joomla Ext. iF Portfolio Nexus SQL injection ============================================ + SQL...

Joomla Ext. iF Portfolio Nexus SQL injection

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla! Extension iF Portfolio Nexus - SQL Injection

Joomla! Extension iF Portfolio Nexus - SQL Injection 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla Extion IF Portfolio Nexus SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

Code injection

Unspecified vulnerability in Cisco NX-OS before 4.01aN21, when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service crash via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609...

CVE-2009-0627

Unspecified vulnerability in Cisco NX-OS before 4.01aN21, when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service crash via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609...

CVE-2009-0627: Undefined Security Weakness

Unspecified vulnerability in Cisco NX-OS before 4.01aN21, when running on Nexus 5000 platforms, allows remote attackers to cause a denial of service crash via an unspecified "sequence of TCP packets" related to "TCP State manipulation," possibly related to separate attacks against CVE-2008-4609...

Solaris 8 (sparc) : 108979-10

SunOS 5.8: platform nexus, I2C, Netra ct a. Date this patch was last updated by Sun : Nov/15/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2008-0960: Improper Authentication

SNMPv3 HMAC verification in 1 Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; 2 UCD-SNMP; 3 eCos; 4 Juniper Session and Resource Control SRC C-series 1.0.0 through 2.0.0; 5 NetApp aka Network Appliance Data ONTAP 7.3RC1 and 7.3RC2; 6 SNMP Research before 16.2; 7...

sinecms-xss.txt

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-26 ISO 8601 Product : SineCms Version : 2.3.4 last, prior versions may also be affected Vendor : http://sourceforge.net/projects/sine - http://www.sinecms.net Vendor Status : 2007-04-26 - Informed! Description : SineCms is a management...

Unfixed XSS vulnerability at www.leganord.org

Security researcher Nexus, has submitted on 23/03/2007 a cross-site-scripting XSS vulnerability affecting www.leganord.org, which at the time of submission ranked 423537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/03/2007. It is currentl...

CVE-2006-1081

SQL injection vulnerability in forgottenpassword.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2006-1081

CVE-2006-1081 affects PluggedOut Nexus 0.1 by Jonathan Beckett. The vulnerability is a SQL injection in forgotten_password.php triggered via the email parameter, enabling remote attackers to execute arbitrary SQL commands. The available connected sources confirm the affected component and root ca...