CVE-2011-1721: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in php/partieadministrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that 1 modify passwords or 2 add new projects. NOTE: some of these details are obtained from third party...

dotproject 2.1.5 Xss / Sql Injection Vulnerabilities

Exploit for php platform in category web applications author: lemlajt software : dotproject version: 2.1.5 tested on: linux cve : PoC : http://localhost/www/cmsadmins/dotpro/dotproject/fileviewer.php?fileid=' in src: 2 ./dotproject/fileviewer.php:127 dbloadHash'SELECT FROM dotpfiles WHERE fileid ...

HOLD — HBGary Federal News…

HBGary Federal, the beleagured security startup that has been the target of the online mischief making group Anonymous for the last week said on Monday that it was ceasing operations | its CEO Aaron Barr was stepping down. The consulting firm, a wholly owned subsidiary of HBGary Inc., had been...

Fedora Update for bugzilla FEDORA-2011-0755

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2011-0755 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Savannah GNU Site Compromised

A site belonging to the Savannah GNU free software archive was attacked recently, leading to a compromise of encrypted passwords and enabling the attackers to access restricted project material. The compromise was the result of a SQL injection attack against the savannah.gnu.org site within the...

Mainely Newspaper CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================== Mainely Newspaper CMS Persistent XSS Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

[SECURITY] Fedora 13 Update: bugzilla-3.4.8-2.fc13

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Drupal Storm 1.32 Cross Site Scripting

Drupal Storm module is a CRM type module that allows you to make orgs, people, tasks, and project. It is used on thousands of sites according to http://drupal.org/project/usage/storm. Storm version 1.32 have a lots of cross site scripting vulns. Sploits - Make or view a Storm organization at...

Scratcher - SQL Injection Cross-Site Scripting

Scratcher - SQL Injection Cross-Site Scripting + Scratcher SQL/XSS Multiple Remote Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0...

CVE-2010-1363: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JProjects comj-projects component for Joomla! allows remote attackers to execute arbitrary SQL commands via the project parameter in a projects action to index.php...

Fedora Update for trac FEDORA-2010-4318

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2010-4318 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for trac FEDORA-2010-4287

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2010-4287 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Joomla JP Jobs SQL Injection

Exploit Title: Joomla component jpjobs SQL Injection vulnerability Date: 03.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product...

Joomla! Component JP Jobs 1.4.1 - SQL Injection

Joomla! Component JP Jobs 1.4.1 - SQL Injection :: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = jpjobs :: Vendor = Joomla! Projects :: Vendor Website = http://www.joomlanetprojects.com/ ::...

Joomla! Component JP Jobs 1.4.1 - SQL Injection

:: General information :: Joomla component jpjobs SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = jpjobs :: Vendor = Joomla! Projects :: Vendor Website = http://www.joomlanetprojects.com/ :: About the product =...

[SECURITY] Fedora 13 Update: trac-0.11.7-1.fc13

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...

[SECURITY] Fedora 12 Update: trac-0.11.7-1.fc12

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...

[SECURITY] Fedora 11 Update: trac-0.11.7-1.fc11

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...

Security Risks Abound in Virtualized Environments

Through 2012, 60 percent of virtualized servers will be less secure than the physical servers they replace, according to Gartner. Although they expect this figure to fall to 30 percent by the end of 2015, analysts warned that many virtualization deployment projects are being undertaken without...

PT-2010-2062 · Microsoft · Producer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Movie Maker versions 2.1 through 6.0 Microsoft Producer version 2003 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted project .MSWMM file. Recommendations: For Microsoft...