LxBlog XSS / SQL Injection

Securitylab.ir Application Info: Name: LxBlog Website: http://www.lxblog.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql/Xss Risk: Medium =========================================================...

Namad Cms Remote File Download

Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download Vulnerability Risk: Medium Dork: "Copyrigh...

Namad (IMenAfzar) 2.0.0.0 Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download...

Namad 2.0.0.0 File Disclosure

Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download Vulnerability Risk: Medium Dork: "Copyrigh...

MaxCMS 2.0 - incajax.asp SQL Injection

MaxCMS 2.0 - incajax.asp SQL Injection Securitylab.ir Application Info: Name: Maxcms Version: 2.0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

Max CMS 2.0 SQL Injection

Securitylab.ir Application Info: Name: MaxCMS Version: 2.0 web: http://maxcms.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

Creasito e-Commerce 1.3.16 (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications =========================================================== Creasito e-Commerce 1.3.16 Auth Bypass SQL Injection Vuln =========================================================== Salvatore "drosophila" Fresta + Application: creasito...

Tiny Blogr 1.0.0 RC4 SQL Injection

Salvatore "drosophila" Fresta + Application: Tiny Blogr + Version: 1.0.0 rc4 + Website: http://tinyblogr.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 17 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact:...

Loggix Project 9.4.5 (refer_id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Loggix Project 9.4.5 referid Blind SQL Injection Vulnerability ================================================================= Salvatore "drosophila" Fresta + Application:...

Loggix Project 9.4.5 SQL Injection

Salvatore "drosophila" Fresta + Application: Loggix Project + Version: 9.4.5 + Website: http://loggix.gotdns.org + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

Solaris 10 (x86) : 122676-05

SunOS 5.10x86: SunFreeware samba man page. Date this patch was last updated by Sun : Apr/23/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

Solaris 5.8 (sparc) : 124301-13

Portal Server 7.1 Update 2 Solaris sparc: Maintenance Update Rel. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

[Full-disclosure] Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure

Advisory: Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure RedTeam Pentesting discovered an information disclosure in the Fujitsu- Siemens BX300 Switch Blade during a penetration test. By accessing URLs of the web interface directly and aborting the authentication dialog, one is...

fusetalkautherror-xss.txt

Hello everyone, After trying to report a SQL bug autherror.cfm to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure...

fusetalk SQL (autherror.cfm)

Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...

Zindizayn Okul Web Sistemi v1.0 Sql VulnZ.

Script's Name : Zindizayn Okul Web Sistemi v1.0 tr Script's MainPage : http://www.okulwebsistemi.com Risk : Medium Found By : ShaFuck31 Thanks : | The RйD | DesquneR | SaboTaqe | ST@ReXT | BLaSTER | Vulnerable file : mezungiris.asp & ogretmenkontrol.asp Vuln :...

Solaris 5.7 (sparc) : 110262-05

Veritas Volume Manager 3.0.4: general patch for Solaris 7. Date this patch was last updated by Sun : Jun/08/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

pics-traverse.txt

Pics Navigator Directory Traversal Vulnerability By : sn0oPy Risk : medium site : http://www.jeunes-webmasters.com/ Dork : "Powered by J-Web Pics Navigator v2.0" | inurl:"jwpn-photos.php" | exploit : for the v1.0 http://www.target/gallery directory/pn-menu.php?ret=Pics%20Navigator&dir=../../../ f...

Pics Navigator Directory Traversal Vulnerability

Pics Navigator Directory Traversal Vulnerability By : sn0oPy Risk : medium site : http://www.jeunes-webmasters.com/ Dork : "Powered by J-Web Pics Navigator v2.0" | inurl:"jwpn-photos.php" | exploit : for the v1.0 http://www.target/gallery directory/pn-menu.php?ret=Pics20Navigator&dir=../../../ fo...