Joomla! Component com_icagenda - id Multiple Vulnerabilities

Joomla! Component comicagenda - id Multiple Vulnerabilities Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats...

Joomla! Component com_icagenda - 'id' Multiple Vulnerabilities

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . ------------------------------------------------------------------------------ Exploit Title:...

Videosmate Organizer 4.2 Authentication Bypass / Path Disclosure

===================================================================== Vulnerable software: Videosmate Organizer V 4.2 all versions Vendor: http://videosmate.com/ Software License: Commercial Vulns: Authentication Bypass & Path Disclosure Risk: Critical Dork: intext:Powered by Videosmate Organizer...

Joomla iCagenda SQL Injection / Path Disclosure

Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . ------------------------------------------------------------------------------ Exploit Title:...

Drupal 7.15 suffers from multiple path disclosure vulnerabilities

No description provided by source. ============================================================ Vulnerable Software: Drupal 7.15 Downloaded from: http://ftp.drupal.org/files/projects/drupal-7.15.tar.gz Vuln Type: Path Disclosure ============================================================ Tested:...

Drupal 7.15 Path Disclosure Vulnerability

Exploit for php platform in category web applications ============================================================ Vulnerable Software: Drupal 7.15 Downloaded from: http://ftp.drupal.org/files/projects/drupal-7.15.tar.gz Vuln Type: Path Disclosure...

Drupal 7.15 Path Disclosure

============================================================ Vulnerable Software: Drupal 7.15 Downloaded from: http://ftp.drupal.org/files/projects/drupal-7.15.tar.gz Vuln Type: Path Disclosure ============================================================ Tested: php.ini MAGICQUOTESGPC OFF Safe...

Design/Logic Flaw

theme/yuicombo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for the drag-and-drop script, which allows remote attackers to obtain the installation path by sending a request for a nonexistent resource and then reading the response...

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55597/info WordPress is prone to multiple path-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. WordPress 3.4...

WordPress 3.4.2 User Enumeration / Path Disclosure

============================================================ Vulnerable Software: WordPress Version 3.4.2 Downloaded from: http://wordpress.org/latest.zip MD5SUM: d670508d81e2fd060c2041441bc03300 wordpress-3.4.2.zip =========================================================== Tested: php.ini...

WordPress 3.4.2 - Multiple Path Dislosure Vulnerabilities

WordPress 3.4.2 version is prone to multiple path dislosure vulnerabilities that can be used by remote attackers to obtain sensitive information that may lead to further attacks. Solution Update WordPress...

WordPress Core 3.4.2 - Multiple Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55597/info WordPress is prone to multiple path-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. WordPress 3.4.2 is vulnerable; other versions may also be affected...

Fedora 18 : phpMyAdmin-3.5.2.2-1.fc18 (2012-11962)

phpMyAdmin 3.5.2.2 2012-08-12 =============================== - security Fixed XSS vulnerabilities, see PMASA-2012-4 http://www.phpmyadmin.net/homepage/security/PMASA-2012 -4.php phpMyAdmin 3.5.2.1 2012-08-03 =============================== - security Fixed local path disclosure vulnerability, se...

Wordpress 3.X.X and prior - Path Disclosure/File Inclusion Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

WordPress Tierra Audio Path Disclosure

Title : Wordpress-Tierra Audio Full Path Disclosure/Directory Listing Vulnerabilities. Author : Dark-Puzzle Souhail Hammou Date : 14th September 2012 Risk : Low Tested On : Windows XP SP3 - Fr & Backtrack 5 R3 Greetings : Inj3ct0rs - Offensive Security - Security Focus - Packetstorm Security...

CVE-2012-0837

Joomla! CVE-2012-0837 affects Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1. The issue is an information-disclosure vulnerability that allows attackers to obtain the installation path via unspecified vectors related to the administrator area. The available documents do not provide root-cause ...

WordPress BBPress SQL Injection / Path Disclosure

No description provided by source. Exploit Title: Wordpress plugins - bbpress Multiple Vulnerabilities. Date: 31 August 2012 Author: Dark-Puzzle Souhail Hammou Vendor Website : www.bbpress.ru / www.bbpress.com Risk : Critical Version: All Versions Google Dork : N/A Category: Webapps/0day Tested o...

Sistem Biwes Multiple Vulnerability`

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

Paliz CMS Full Path Disclosure Vulnerability

Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...

WordPress BBPress SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...