63 matches found
CVE-2016-10591
Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince1 CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested tarball with an attacker controlled...
CVE-2016-10591: Missing Encryption of Sensitive Data
Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince1 CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested tarball with an attacker controlled...
SilverStripe CMS 3.6.2 - CSV Excel Macro Injection
SilverStripe CMS 3.6.2 - CSV Excel Macro Injection Exploit Title: SilverStripe CMS - 3.6.2 CSV Excel Macro Injection Vendor Homepage: https://www.silverstripe.org/ Software Link: https://www.silverstripe.org/download Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Websit...
Monstra CMS 3.0.4 Remote Shell Upload
Exploit Title: Monstra CMS - 3.0.4 RCE Vendor Homepage: http://monstra.org/ Software Link: https://bitbucket.org/Awilum/monstra/downloads/monstra-3.0.4.zip Discovered by: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince Category: webapps Platfor...
KeystoneJS 4.0.0-beta.5 - CSV Excel Macro Injection
Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated CSV Injection Vendor Homepage: http://keystonejs.com/ Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince Category: WEBAPPS Platform: Node.js CVE: CVE-2017-15879 Vendor...
Downloads Resources over HTTP
Overview Affected versions of prince insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
Frog Prince - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Frog Prince published at the 'play' market has multiple vulnerabilities...
Prince Clan Chess Club 0.8 Include.PCchess.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...
Moderate: Red Hat Security Advisory: openstack-keystone security and bug fix update
Updated openstack-keystone packages that fix two security issues and various bugs are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Moderate: Red Hat Security Advisory: openstack-keystone security and bug fix update
Updated openstack-keystone packages that fix one security issue and two bugs are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
RedHat Update for kernel RHSA-2011:0329-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ubuntu: Security Advisory (USN-1438-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sql injection
SQL injection vulnerability in the Prince Clan Chess Club compcchess component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a showgame action to index.php, a different vector than CVE-2008-0761...
CVE-2009-0379
SQL injection vulnerability in the Prince Clan Chess Club compcchess component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a showgame action to index.php, a different vector than CVE-2008-0761...
CVE-2009-0379
CVE-2009-0379 describes an SQL injection in the Joomla! component com_pcchess (Prince Clan Chess Club) via the game_id parameter in the showgame action to index.php. This is a remote, unauthenticated injection vulnerability with potential for arbitrary SQL execution. The vector is distinct from C...
rakhi-sql.txt
■ Prince Comparison Script : Shopping card @.@ AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Remote Sql inJection SIte vuln: http://willscript.com/rjbikenew/index.php @.@ str0ke OnlY me no help for this ;- /...
Joomla Component pcchess <= 0.8 Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncompcchess AUTHOR : S@BUN HOME : http://www.hackturkiye.com MA陌L : [email protected] DORK 1 : allinurl: compcchess "userid" DORK 2 : allinurl: compcchess EXPLOIT :...
CVE-2008-0761
SQL injection vulnerability in index.php in the Prince Clan Chess Club compcchess 0.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a players action...
