4796 matches found
Design/Logic Flaw
activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...
DOURAN Portal 3.9.0.23 File Up/Download Issues
Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not "fully secure" . so because of patchin...
DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities
No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not...
activeCollab XSS and Full Path Disclosure
activeCollab XSS and Full Path Disclosure Vuln. discovered by : r0t Date: 17 May 2009 Vendor:http://www.activecollab.com/ affected versions:2.1, corporate other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html 1.Cross-Si...
Multiple vulnerabilities in YaBook
Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Redirector, HTTP Response Splitting, Information Leakage и Full path disclosure уязвимостях в YaBook. SQL Injection: http://site/guestbook/index.php?action=jump&id=-120union20select20version Redirector через SQL Injection:...
douran portal 3.9.0.23 - Multiple Vulnerabilities
douran portal 3.9.0.23 - Multiple Vulnerabilities Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new...
DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= DOURAN Portal = 3.9.0.23 Multiple Remote Vulnerabilities ========================================================= Abysssec Inc Public Advisory Description : these vulnerabilites...
douran portal 3.9.0.23 - Multiple Vulnerabilities
Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not "fully secure" . so because of patchin...
Vulnerabilities in OpenX
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Cross-Site Scripting и Redirector уязвимостях в OpenX. Full path disclosure: http://site/openx/www/delivery/fc.php?MAXtype=1 XSS: http://site/openx/www/delivery/fc.php?MAXtype=3Cscript3Ealertdocument.cookie3C/script3E XSS обх...
Invision Power Board 3.0.0b5 XSS
================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...
Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns
No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail :...
Multiple vulnerabilities in Webglimpse
Здравствуйте 3APA3A! Сообщаю вам о найденных мною множественных уязвимостях в Webglimpse. Это Full path disclosure, Cross-Site Scripting, Directory Traversal и Authorization bypass уязвимости. Уязвимости в админке Webglimpse в которую можно попасть через гостевой аккаунт, или захватив кукис админ...
Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns
Exploit for unknown platform in category web applications =============================================================== Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns ===============================================================...
Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure
Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...
Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure
================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...
Fowl CMS 1.1 SQL Injection / LFI / Upload
------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--FOWLCMS 1.1-- ------------------------------------------------------- ----------------- CMS INFORMATION: ----------------- --WEB: https://sourceforge.net/projects/fowlcms/ --DOWNLOAD:...
AWStats 6.4 - AWStats.pl Multiple Full Path Disclosures
AWStats 6.4 - AWStats.pl Multiple Full Path Disclosures source: https://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...
AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures
source: https://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. The following are vulnerable: AWStats 6.5 build...
moziloCMS 1.11 (LFI/PD/XSS) Multiple Remote Vulnerabilities
No description provided by source. + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...
mozilloCMS 1.11 LFI / XSS
moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...