3009 matches found
CVE-2 0 0 9-1 1 5 1 phpMyadmin Remote Code Injection && Execution-vulnerability warning-the black bar safety net
Directory 1. Vulnerability Description 2. Vulnerability trigger conditions 3. Vulnerability the range of 4. Vulnerability code analysis 5. Defense method 6. Offensive and defensive thinking 1. Vulnerability description Insufficient output sanitizing when generating configuration file phpMyAdmin i...
CVE-2014-3863
CVE-2014-3863 is a stored XSS in the Joomla extension JChatSocial (before 2.3). The vulnerability allows remote attackers to inject arbitrary script via the filename parameter in a file upload in an active JChat chat window. Affected versions are 2.2 and lower; vendor fixed the issue within hours...
HttpFileServer 2.3.x Remote Command Execution
Affected software: http://sourceforge.net/projects/hfs/ Version : 2.3x Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...
Design/Logic Flaw
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors...
CVE-2014-4823
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors...
CVE-2014-7199
Cross-site scripting XSS vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file...
Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)
Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution 1 Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...
HttpFileServer 2.3.x Remote Command Execution Vulnerability
Exploit for multiple platform in category remote exploits Affected software: http://sourceforge.net/projects/hfs/ Version : 2.3x Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa...
IBM GCM16 / GCM32 Global Console Manager KVM Switch Firmware Version < 1.20.20.23447 Multiple Vulnerabilities
According to its self-reported version, the remote host is an IBM Global Console Manager KVM switch with a firmware version prior to 1.20.20.23447. It is, therefore, affected by the following vulnerabilities : - A reflected cross-site scripting attack via 'kvm.cgi' or 'avctalert.php'. CVE-2014-30...
Fixed potential path traversal attack and remote code injection
This is a security release. All users MUST upgrade to this release to prevent two potential security issues: path traversal attack remote code injection These two security issues have been reported by Andreas Forsblom. THANKS! Below is the original report Andreas sent me: Hi William, First, thank...
Fixed potential path traversal attack and remote code injection
This is a security release. All users MUST upgrade to this release to prevent two potential security issues: - path traversal attack - remote code injection These two security issues have been reported by Andreas Forsblom. THANKS! Below is the original report Andreas sent me: Hi William, First,...
Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Barracuda Networks 35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361...
CVE-2014-3324
CVE-2014-3324 affects Cisco TelePresence Server Software 4.0(2.8). The vulnerability is in the administrative web interface login page, where insufficient input validation of certain HTTP GET/POST parameters allows unauthenticated remote attackers to inject arbitrary script/HTML (XSS). Cisco’s ad...
CVE-2014-2968
CVE-2014-2968 is a stored cross-site scripting (XSS) vulnerability in the Huawei E355 series web interface. The issue affects the CH1E355SM device with software 21.157.37.01.910 and Web UI 11.001.08.00.03, allowing an attacker to inject arbitrary script or HTML via an SMS message when interacting...
CVE-2014-4557
CVE-2014-4557 concerns the WordPress plugin Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop), affecting version 3.1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in test-plugin.php that allows remote attackers to inject arbitrary web script or HTML through the ...
Cross site scripting
Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...
CVE-2014-4533
The CVE-2014-4533 entry describes a Cross-site scripting (XSS) flaw in the WordPress GEO Redirector plugin, via ajax_functions.php, affecting version 1.0.1 and earlier. The vulnerability is exploitable through the hid_id parameter to inject arbitrary script/HTML. Affected component: GEO Redirecto...
phpMyAdmin 2.5.7 - Remote code injection Exploit
No description provided by source. / phpmy-explt.c written by Nasir Simbolon nasir kecapi com eagle kecapi com Jakarta, Indonesia June, 10 2004 A phpMyAdmin-2.5.7 exploite program. This is a kind of mysql server wrapper acts like a proxy except that it will sends a fake table name, when client...
123 Flash Chat 5.0 - Remote Code Injection Weakness
No description provided by source. source: http://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to tak...
ShoutPro <= 1.5.2 (shout.php) Remote Code Injection Exploit
No description provided by source. ?/ File: shoutbox.php Affects: ShoutPro 1.5.2 may affect earlier versions Date: 17th April 2007 Issue Description: =========================================================================== ShoutPro 1.5.2 fails to fully sanitize user input $shout that it writes...