RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure source: https://www.securityfocus.com/bid/32563/info RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities. Exploiting these issues can allow attackers to obtain sensitive information, steal cookie...

RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure

source: https://www.securityfocus.com/bid/32563/info RakhiSoftware Shopping Cart is prone to multiple remote vulnerabilities. Exploiting these issues can allow attackers to obtain sensitive information, steal cookie data, access or modify data, or exploit latent vulnerabilities in the underlying...

Vulnerabilities in CimWebCenter

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в системе CimWebCenter. XSS: http://site/forum/?mid=28&do=showmess&tid=263E3Cscript3Ealertdocument.cookie3C/script3E&mode=-1...

Multiple remote vulnerabilities MoinMoin v1.80

=============================================================== !vuln MoinMoin v1.5.9 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. MoinMoin v1.80 is also affected to a lesser extent. Other versions may also be affected...

dedecms fill out a tasteless vulnerability-vulnerability warning-the black bar safety net

Author: Ice the origin of theL. S. T&0. S. T Just look at the small handsome gay blog found above also describes a About dedecms a 0day（http://www. xssor. cn/sa/? action=show&id=5 A 8, but this bug and a few months ago that write directly to the file in the vulnerability If is not a file, I...

moinmoin-dos.txt

=============================================================== !vuln MoinMoin v1.5.9 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. MoinMoin v1.80 is also affected to a lesser extent. Other versions may also be affected...

Gentoo Security Advisory GLSA 200507-02 (wordpress)

The remote host is missing updates announced in advisory GLSA 200507-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200503-04 (phpwebsite)

The remote host is missing updates announced in advisory GLSA 200503-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-02 (wordpress)

The remote host is missing updates announced in advisory GLSA 200507-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities in FeedBurner FeedSmith for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и HTTP Response Splitting + Cross-Site Scripting уязвимостях в плагине FeedBurner FeedSmith для WordPress. Который разрабатывается FeedBurner, принадлежащей компании Google. Full path disclosure:...

Full path disclosure and SQL Injection vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и SQL Injection уязвимостях в системе Envolution. Full path disclosure: http://site/index.php?module=Errore&type=admin&op=noexist&modname=22 http://site/index.php?module=Errore&type=admin&op=22...

New vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и Cross-Site Scripting уязвимостях в системе Envolution. Full path disclosure: http://site/user.php?module=22 http://site/user.php?uname=22 http://site/user.php?upass=22 http://site/user.php?upassverif=22...

Vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в системе Envolution. XSS: Уязвимость в user.php в модуле NS-NewUser в параметре op. http://site/user.php?module=NS-NewUser&op=3Cscript3Ealertdocument.cookie3C/script3E Full path disclosure:...

CVE-2008-3654: Undefined Security Weakness

Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors...

CVE-2008-3481

themes/sample/theme.php in Coppermine Photo Gallery CPG 1.4.18 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit

No description provided by source. ?php / ---------------------------------------------------------------------- Coppermine Photo Gallery = 1.4.18 LFI / Remote Code Execution Exploit ---------------------------------------------------------------------- author...: EgiX mail.....:...

Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is...

cpg-lfiexec.txt

authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$", $GET'lang' ? $GET'lang' : $CONFIG'lang'; 306. 307. 308. if isset$USER'lang' &&...

Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution

authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$", $GET'lang' ? $GET'lang' : $CONFIG'lang'; 306. 307. 308. if isset$USER'lang' &&...

Vulnerabilities in FireStats

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Full path disclosure: http://site/wp-content/plugins/firestats/js/firestats.js.php...