XSS vulnerability in Docebo Announcements

Vulnerability ID: HTB22612 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindoceboannouncements.html Product: Docebo Vendor: Docebo http://www.docebo.org/ Vulnerable Version: 3.6.0.4 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Docebo

Vulnerability ID: HTB22611 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindocebo.html Product: Docebo Vendor: Docebo http://www.docebo.org/ Vulnerable Version: 3.6.0.4 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS Cross Site Scripting...

SPAW Editor 2.0.8.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== SPAW Editor 2.0.8.1 Local File Inclusion Vulnerability ====================================================== Exploit Title: local file include Date: Author: soorakh kos Software Link:...

FAQMasterFlex 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= FAQMasterFlex 1.2 SQL Injection Vulnerability ============================================= Author: cyb3r.anbu Software Link: http://www.lethalpenguin.net/design/faqmasterflex.php Version: 1.2 Test...

Aprox CMS Engine 6 Path Disclosure / SQL Injection

Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.aprox.de/ Software Link: http://www.aprox.de/index.php?page=d&application=zip&dateiname=AproxEnginev6 Version: 6 Vulnerability 1 Vulnerable...

Aspect Ratio CMS - Blind SQL Injection

Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.meso.net Software Link: http://www.meso.net/aspekt-ratio Dork: inurl:w3.php?nodeId= Vulnerability Explanation: $GET"nodeId" isn't sanitized before executing the database query. An attacker can use this for a blind SQ...

Microsoft IIS 6.0 ASP Stack Overflow (Stack Exhaustion) Denial of Service

Exploit for windows platform in category dos / poc =========================================================== Microsoft IIS 6.0 ASP Stack Overflow Stack Exhaustion DoS =========================================================== Affected Products Only Microsoft IIS 6.0 was tested successfully On ...

Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability ================================================================ Vendor: Zen Ventures, LLC Product web page:...

Zen Cart 1.3.9f Local File Inclusion

Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components. Support is provided for...

Zen Cart 1.3.9f - typefilter Local File Inclusion

Zen Cart 1.3.9f - typefilter Local File Inclusion Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL...

GetSimple CMS 2.01 Cross Site Scripting

Vulnerability ID: HTB22609 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingetsimplecms1.html Product: GetSimple CMS Vendor: Cagintranet Networks http://get-simple.info/ Vulnerable Version: 2.01 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type:...

XSRF (CSRF) in Zimplit

Vulnerability ID: HTB22605 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinzimplit.html Product: Zimplit Vendor: Zimplit Ltd. http://www.zimplit.com/ Vulnerable Version: 3.0 and Probably Prior Versions Vendor Notification: 15 September 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...

JE CMS 1.0.0 Bypass Authentication by SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= JE CMS 1.0.0 Bypass Authentication by SQL Injection Vulnerability ================================================================= Title : JE CMS 1.0.0 Bypass Authentication by...

e107 0.7.23 SQL Injection

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

e107 0.7.23 - SQL Injection

e107 0.7.23 - SQL Injection Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010...

Car Portal v2.0 BLIND SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Car Portal v2.0 BLIND SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

iWorkstation 9.3.2.1.4 SEH Overwrite

iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.sharewareplaza.com/iworkstation-downloads68989.html Vulnerable version iworkstation Version 9.3.2.1.4 Tested on XP SP2 Greets Puneet Jain my $head =...

iworkstation 9.3.2.1.4 - Local Overflow (SEH)

iworkstation Version 9.3.2.1.4 seh exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.sharewareplaza.com/iworkstation-downloads68989.html Vulnerable version iworkstation Version 9.3.2.1.4 Tested on XP SP2 Greets Puneet Jain my $head =...

Microsoft PowerPoint Viewer - TextBytesAtom Stack Buffer Overflow (MS10-004) (Metasploit)

$Id: ms10004textbytesatom.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...