CVE-2010-0756

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...

Session fixation

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...

AtACimo RC2 Cross Site Scripting

Exploit Title: AtACimo RC2 index.php XSS Vulnerability Date: 2010-02-25 Author: sniper ip Software Link: http://atacimo.com/media/downloadgallery/AtACimo%20RC2.zip Version: AtACimo RC2 Tested on: no CVE : no Code : http://127.0.0.1/AtACimo/admin/login/forgot/index.php alertdocument.cookie;"...

AtACimo RC2 (index.php) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================= AtACimo RC2 index.php XSS Vulnerability ========================================= Exploit Title: AtACimo RC2 index.php XSS Vulnerability Date: 2010-02-25 Author: sniper ip Software Link:...

Debian DSA-1945-1 : gforge - symlink attack

Sylvain Beucler discovered that gforge, a collaborative development tool, is prone to a symlink attack, which allows local users to perform a denial of service attack by overwriting arbitrary files. The oldstable distribution etch, this problem has been fixed in version 4.5.14-22etch13...

CVE-2009-3303

CVE-2009-3303 affects GForge and its help/tracker.php script. Versions 4.5.14, 4.7 rc2, and 4.8.1 are vulnerable to a cross-site scripting (XSS) flaw via the helpname parameter due to insufficient input sanitising. The issue allows remote attackers to inject arbitrary HTML/script content into a u...

Joomla JD-WordPress Vulnerability File Inclusion Version 2.0 RC2

REGISTER GLOBALS ON wp-feed.php?mosConfigabsolutepath= Version 2.0 RC2 UPDATE IT ! !/usr/bin/perl + Author : Don Tukulesto [email protected] + Date : October 20, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : www.joomladeveloping.org + version : 2.0 RC2 + Method : Remote File...

Joomla JD-WordPress 2.0 RC2 remote file icnlusion

Exploit for unknown platform in category web applications ================================================= Joomla JD-WordPress 2.0 RC2 remote file icnlusion ================================================= !/usr/bin/perl + Author : Don Tukulesto + Date : October 20, 2009 + Homepage :...

CVE-2009-3364

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

FTPShell Client 4.1 RC2 Name Session Stack Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== FTPShell Client 4.1 RC2 Name Session Stack Overflow Exploit =========================================================== / FTPShell Client, Name Session Stack Overflow Exploit Tested...

Discloser 0.0.4-rc2 SQL Injection Vulnerability

Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mail:...

Discloser 0.0.4-rc2 SQL Injection

Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mail:...

Discloser 0.0.4-rc2 (index.php more) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Discloser 0.0.4-rc2 index.php more SQL Injection Vulnerability ================================================================ Salvatore "drosophila" Fresta + Application:...

Discloser 0.0.4-rc2 - index.php?more SQL Injection

Discloser 0.0.4-rc2 - index.php?more SQL Injection Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author:...

Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection

Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mail:...

Debian DSA-1818-1 : gforge - insufficient input sanitising

Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...

NTP.org 'ntpd' Stack Buffer Overflow Vulnerability

NTP.org SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900623";...

CVE-2009-1461

CVE-2009-1461 describes a cross-site scripting (XSS) vulnerability in the Create New Page form of razorCMS 0.3 RC2 and earlier. The issue allows remote authenticated users to inject arbitrary script or HTML via the Page Title field. Affected component is the Create New Page workflow; vulnerabilit...

FreeWebShop.org 2.2.9 RC2 - lang_file Local File Inclusion

FreeWebShop.org 2.2.9 RC2 - langfile Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::FreeWebshop.org 2..2.9R2 ------------------------------------------------- Author: ahmadbady...

FreeWebshop.org 2.2.9 RC2 (lang_file) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== FreeWebshop.org 2.2.9 RC2 langfile Local File Inclusion Vulnerability ======================================================================== =-=-local file...