Lucene search
+L

1973 matches found

Exploit DB
Exploit DB
•added 2010/04/27 12:00 a.m.•45 views

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

5CVSS5.8AI score0.13985EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2010/04/22 12:00 a.m.•22 views

Joomla Portfolio Local File Inclusion

Joomla compnent comportfolio Local File Disclosure author : Mr.tro0oqy from comunity college : email : [email protected] greetz:alzomer , Mr.ksoory , R3d-D3vil from palstine .. dork :inurl:index.php?option=comportfolio exp:...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2010/04/09 12:00 a.m.•38 views

Debian DSA-2030-1 : mahara - sql injection

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is not properly escaping input when generating a unique username based on a remote user name from a single sign-on application. An attacker can use this to compromise the mahara database via crafted user names...

7.5CVSS5.6AI score0.01717EPSS
SaveExploits0References2
NVD
NVD
•added 2010/03/29 6:30 p.m.•25 views

CVE-2010-0452

Multiple cross-site scripting XSS vulnerabilities in HP Project and Portfolio Management Center PPMC, formerly Mercury IT Governance 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.02677EPSS
SaveExploits0References5
CVE
CVE
•added 2010/03/29 6:00 p.m.•64 views

CVE-2010-0452

CVE-2010-0452 concerns multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC), affecting HP/Mercury IT Governance releases 7.1 SP10 and 7.5 SP3 and earlier. The Red Hat/HP security bulletins and CVE records describe remote XSS via unspecified vect...

4.3CVSS5.9AI score0.02677EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/29 12:00 a.m.•2 views

CVE-2010-0452: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP Project and Portfolio Management Center PPMC, formerly Mercury IT Governance 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.02677EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2010/03/26 12:00 a.m.•69 views

[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01762443 Version: 1 HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center PPMC, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be act...

4.3CVSS0.1AI score0.02677EPSS
SaveExploits0
Prion
Prion
•added 2010/03/08 3:30 p.m.•24 views

Directory traversal

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

7.5CVSS7.6AI score0.07866EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/08 12:00 a.m.•6 views

CVE-2009-4679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

7.5CVSS6.3AI score0.07866EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2010/02/24 12:00 a.m.•52 views

Debian DSA-1924-1 : mahara - several vulnerabilities

Two vulnerabilities have been discovered in mahara, an electronic portfolio, weblog, and resume builder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3298 Ruslan Kabalin discovered a issue with resetting passwords, which could lead to a privilege...

6.5CVSS5.2AI score0.02322EPSS
SaveExploits1References5
ThreatPost
ThreatPost
•added 2010/01/15 3:41 p.m.•10 views

Lincoln National: 'Breach May Affect 1.2 Mil Customers'

Lincoln National Corp. LNC last week disclosed a security vulnerability in its portfolio information system that could have compromised the account data of approximately 1.2 million customers. Read the full article. Dark Reading...

1.9AI score
SaveExploits0References2
exploitpack
exploitpack
•added 2009/12/29 12:00 a.m.•22 views

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/12/18 12:00 a.m.•32 views

Joomla Portfolio Blind SQL Injection

Joomla Component comjoomportfolio Blind SQL Injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske Name : comjoomportfolio Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ »...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/12/15 12:00 a.m.•21 views

ClickTrackerASP SQL Injection

?---------------------بسم الله الرحمن الرحيم----------------- وجعلنا من بين ايديهم سدا ومن خلفهم سدا فاغشيناهم فهم لا يبصرون ?---------------------صدق الله العظيم----------------- Tybe: sitedetails.asp siteid REM0TE SQL !NJEC7!0N Vulnerability$ ? Vendor: www.pensacolawebdesigns.com ?download...

SaveExploits0
CVE
CVE
•added 2009/11/24 2:00 a.m.•51 views

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...

7.5CVSS6.6AI score0.01024EPSS
SaveExploits2References5Affected Software1
myhack58
myhack58
•added 2009/11/24 12:00 a.m.•23 views

Joomla! sql injection vulnerability-vulnerability warning-the black bar safety net

Joomla! the iF Portfolio Nexus Component ’id’ sql injection vulnerability The following example URIs are available: http://www.example.com/services/portfolio?view=item&;id=-100%20union%20all%20select%2 0 1,version%2 8%29,3,4,5,6,7,...

1.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/24 12:00 a.m.•4 views

CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...

7.5CVSS6.4AI score0.01024EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2009/11/18 12:00 a.m.•27 views

Joomla Ext. iF Portfolio Nexus SQL injection

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/11/18 12:00 a.m.•25 views

Joomla Extion IF Portfolio Nexus SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

0.9AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/11/18 12:00 a.m.•13 views

Joomla! Extension iF Portfolio Nexus - SQL Injection

Joomla! Extension iF Portfolio Nexus - SQL Injection 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Ext. iF Portfolio Nexus SQL injection + Author : 599eme Man + Contact : [email protected]...

1.1AI score
SaveExploits0
Rows per page
Query Builder