Fedora 18 : php-geshi-1.0.8.11-3.fc18 (2013-5472)

Update to 1.0.8.11 : - Fix for CVE-2012-3521 : Remote directory traversal and information disclosure local file inclusion in the contrib module. - Fix for CVE-2012-3522 : Non-persistent XSS in langwiz contrib script. Note that Tenable Network Security has extracted the preceding description block...

Web Cookbook - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Web Cookbook Multiple SQL Injection Date: 2013/3/12 Exploit Author: Saadat Ullah ， email protected Software Link: http://sourceforge.net/projects/webcookbook/ Author HomePage: http://security-geeks.blogspot.com/ Tested on: Serve...

[IA32] HP Intelligent Management Center v5.1 E0202 topoContent.jsf Non-Persistent Cross-Site Scripting

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: HP Intelligent Management Center Vendor URL: www.hp.com Type: Cross-Site Scripting CWE-79 Date found: 2012-06-08 Date published: 2013-03-04 CVSSv2 Score: CWE-79: 3,5 AV:N/AC:M/Au:S/C:N/I:P/A:...

Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites

Title: ====== Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=688 VL-ID: ===== 688 Common Vulnerability Scoring System: ==================================== 4.5 Introduction:...

Fortigate UTM WAF Appliance - Cross Site Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=559 Release Date: ============= 2012-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 55...

SonicWall PolicyManager Module - Cross Site Vulnerability

Document Title: =============== SonicWall PolicyManager Module - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=529 Release Date: ============= 2012-09-01 Vulnerability Laboratory ID VL-ID: ==================================== 5...

ManageEngine OpStor 7.4 - Multiple Vulnerabilities

ManageEngine OpStor 7.4 - Multiple Vulnerabilities Title: ====== ManageEngine OpStor v7.4 - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=667 VL-ID: ===== 667 Common Vulnerability Scoring System:...

Social Engine 4 Persistent XSS & Non-Persistent XSS

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :------------------------------------------------------------------------------------------ ---------------------------------------------...

Flynax General Classifieds CMS 4.0 - Multiple Vulnerabilities

Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...

Social Engine 4 Cross Site Scripting

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...

Phonalisa 5.0 VoiP Code Execution / Cross Site Scripting

Title: ====== Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities Date: ===== 2012-06-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=526 VL-ID: ===== 526 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Die...

Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...

Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.5.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=586 Release Date: ============= 2012-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 586...

GetSimple CMS 3.1 Cross Site Scripting

Title: ====== GetSimple CMS v3.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=521 VL-ID: ===== 521 Common Vulnerability Scoring System: ==================================== 5 Introduction: ============= GetSimple ...

/secure/admin/jira/AcknowledgeTask.jspa is an open redirect

The AcknowledgeTask.jspa page found under http://$HOST/secure/admin/jira/AcknowledgeTask.jspa can be used to redirect users to another page on the internet and possibly used to create a non-persistent xss flaw. Here is an example url which will direct a user to http://google.com...

Ilient SysAid v8.5.05 - Multiple Web Vulnerabilities

Title: ====== Ilient SysAid v8.5.05 - Multiple Web Vulnerabilities Date: ===== 2012-03-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=470 VL-ID: ===== 470 Introduction: ============= SysAid IT Enterprise Edition is an IT management solution that includes a suite of...

Ilient SysAid 8.5.5 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Ilient SysAid 8.5.5 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/52356/info Ilient SysAid is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

Toenda CMS 1.6.2 Osaka Stable Local File Inclusion

============TOENDA CMS 1.6.2 OSAKA "STABLE" MULTIPLE VULNERABILITIES============ Vulnerable Software: toendaCMS1.6.2OsakaStable Developed by: http://www.toendacms.org/index.php/en/open/download.html toenda.com http://www.toendacms.org/index.php/en/open/download.html Downloaded from:...

Ilient SysAid v8.5.05 - Multiple Web Vulnerabilities

Document Title: =============== Ilient SysAid v8.5.05 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=470 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ==================================== 470...

Adobe Website - Cross Site Scripting Vulnerabilities

Document Title: =============== Adobe Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=371 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 371...