phpslash <= 0.8.1.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...

Sisplet CMS (index.php id) 2008-01-24 - Remote SQL Injection Vulnerability

No description provided by source. ================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities

No description provided by source. / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By...

QUOTE&ORDERING SYSTEM 1.0 (ordernum) Multiple Vulnerabilities

No description provided by source. Title : QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple Vulnerabilities Author : ajann Contact : : S.Page : ... $$ : $250.00 SQL--------------------------------------------------------- Register & Login Before Injection.. http://target/path//search.asp?ordernum=SQL...

smbind <= 0.4.7 - SQL Injection Vulnerability

No description provided by source. smbind = v.0.4.7 Sql Injection Site: https://sourceforge.net/projects/smbind/files/ Reported on 28/08/2010 Author: IHTeam Buggy code: ifisset$POST'username' && isset$POST'password' if!filteralphanum, $POST'username' or !filteralphanum, $POST'password' dieUsernam...

ownrs blog beta3 (sql/xss) Multiple Vulnerabilities

No description provided by source. ============================================================== OwnRS Blog beta3 SQL/XSS Multiple Remote Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

YABB SE 1.5 Quote Parameter SQL Injection Vulnerability

No description provided by source...

Log1 CMS 2.0 - Multiple Vulnerabilities

No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...

Apache Tomcat <= 6.0.15 Cookie Quote Handling Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27706/info Apache Tomcat is prone to an information-disclosure vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to access potentially sensitive data that may aid i...

Standard & Poors ComStock 4.2.4 Machine Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/1080/info Numerous vulnerabilities exist in the ComStock product, as sold by Standard & Poor's. ComStock is based on the RedHat 5.1 distribution, and contains many of the vulnerabilities found in the 5.1 distribution. In...

PageSquid CMS (index.php page) 0.3 Beta - Remote SQL Injection Vulnerability

No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Java Web Start Double Quote Injection Remote Code Execution

No description provided by source. ======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 a...

WF-Quote 1.0 Xoops Module Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23845/info The WF-Quote module for the Xoops CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on April 7, 2014

Medium Alert ID: 33673 First Published: 2014 April 7 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Product Quote Change Request Email Messages on March 18, 2014

Medium Alert ID: 33396 First Published: 2014 March 18 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote change request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on March 2, 2014

Medium Alert ID: 33153 First Published: 2014 March 4 15:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Product Quote Email Messages on February 19, 2014.

Medium Alert ID: 32938 First Published: 2014 February 20 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on November 8, 2013

Medium Alert ID: 31686 First Published: 2013 November 8 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on October 28, 2013

Medium Alert ID: 31522 First Published: 2013 October 29 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quotation request for the recipient. The text in the email message attempts to convince the recipien...

PT-2013-5892

Name of the Vulnerable Software and Affected Versions CA SiteMinder versions 12.0 through 12.51 CA SiteMinder 6 Web Agents affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a character...