Redlab CMS - Multiple SQL Injections

Title : Site by Redlab Multiple Vulnerabilities Vendor or Software Link: : http://www.redlab.net/ Author : tempemendoan Contact : [email protected] Google Dork : inurl:"gorengan tempe" intext:"Site by Redlab Co., Ltd" === POC === » http://website/path/careers-detail.asp?id=SQL »...

New Leak of Documents Is Protest Over Harvard Fellow's Arrest

More than 18,000 academic documents have been copied from an online scholarly archive and posted on Pirate Bay, the file sharing Web site, but questions arose on Friday about where the documents really came from. The documents in question, totalling 18,592 scientific publications and about 33...

SA-CONTRIB-2010-044: Bibliography - Cross Site Scripting

The Bibliography module enables users to manage and display lists of scholarly publications. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This is mitigated by the fact that only users with the 'administer...

SA-CONTRIB-2010-006 - Bibliography Module - Cross Site Scripting

The Bibliography module enables users to manage and display lists of scholarly publications. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Only users with the 'administer biblio' permission are able to exploi...

CVE-2009-2881

Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to 1 index.php and possibly 2 allpubs.php in publications/...

Sql injection

Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to 1 index.php and possibly 2 allpubs.php in publications/...

Unfixed XSS vulnerability at www.progresspublicationsmusic.com

Security researcher SaMTHG, has submitted on 15/11/2008 a cross-site-scripting XSS vulnerability affecting www.progresspublicationsmusic.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2009. I...

CMSimple index.php search Function XSS

The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Chang...