CVE-2010-1659

Directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1659

CVE-2010-1659 : A directory traversal (Local File Inclusion) vulnerability affects the Joomla! extension component com_ultimateportfolio version 1.0. The underlying issue is an improper validation of the controller parameter in index.php, allowing an attacker to read arbitrary files by supplying ...

CVE-2010-1659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla Ultimate Portfolio 1.0 Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

Joomla Component com_ultimateportfolio Local File Inclusion

Exploit for php platform in category web applications ====================================================================== Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability ======================================================================...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion ======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

Joomla Portfolio Local File Inclusion

Joomla compnent comportfolio Local File Disclosure author : Mr.tro0oqy from comunity college : email : [email protected] greetz:alzomer , Mr.ksoory , R3d-D3vil from palstine .. dork :inurl:index.php?option=comportfolio exp:...

Debian DSA-2030-1 : mahara - sql injection

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is not properly escaping input when generating a unique username based on a remote user name from a single sign-on application. An attacker can use this to compromise the mahara database via crafted user names...

CVE-2010-0452

Multiple cross-site scripting XSS vulnerabilities in HP Project and Portfolio Management Center PPMC, formerly Mercury IT Governance 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0452

CVE-2010-0452 concerns multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC), affecting HP/Mercury IT Governance releases 7.1 SP10 and 7.5 SP3 and earlier. The Red Hat/HP security bulletins and CVE records describe remote XSS via unspecified vect...

CVE-2010-0452: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP Project and Portfolio Management Center PPMC, formerly Mercury IT Governance 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01762443 Version: 1 HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center PPMC, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be act...

Directory traversal

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2009-4679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Debian DSA-1924-1 : mahara - several vulnerabilities

Two vulnerabilities have been discovered in mahara, an electronic portfolio, weblog, and resume builder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3298 Ruslan Kabalin discovered a issue with resetting passwords, which could lead to a privilege...

Lincoln National: 'Breach May Affect 1.2 Mil Customers'

Lincoln National Corp. LNC last week disclosed a security vulnerability in its portfolio information system that could have compromised the account data of approximately 1.2 million customers. Read the full article. Dark Reading...

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

Joomla Portfolio Blind SQL Injection

Joomla Component comjoomportfolio Blind SQL Injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske Name : comjoomportfolio Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ »...

ClickTrackerASP SQL Injection

?---------------------بسم الله الرحمن الرحيم----------------- وجعلنا من بين ايديهم سدا ومن خلفهم سدا فاغشيناهم فهم لا يبصرون ?---------------------صدق الله العظيم----------------- Tybe: sitedetails.asp siteid REM0TE SQL !NJEC7!0N Vulnerability$ ? Vendor: www.pensacolawebdesigns.com ?download...