Pligg 1.0.4 Cross Site Scripting

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in CruxCMS

Vulnerability ID: HTB22445 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxcms.html Product: CruxCMS Vendor: CruxSoftware Vulnerable Version: 3.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

XT-Commerce v1 Beta 1 permission to bypass the Modify download backup vulnerability-vulnerability warning-the black bar safety net

Premiere: the Red section of the network security Author: Amxking Submitted to: indoushka Vulnerability program: XT-Commerce v1 Beta 1 Affected version: v1 Beta 1 Risk level: medium Vulnerability description: Amxking:the vulnerability is I and the foreign Avengers team communication time obtained...

Solaris 10 (sparc) : 142436-08

SunOS 5.10: mail, sendmail and passwd patc. Date this patch was last updated by Sun : Jun/07/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

justVisual 2.0 Local File Inclusion

justVisual 2.0 index.php = LFI Vulnerability +Title: justVisual 2.0 index.php Local File Vulnerability +Version: 2.0 +License: http://www.gnu.org/copyleft/gpl.html +Download: http://fh54.de/justVisual/packages/justVisual2.zip +Risk: Medium +Local: Yes -Remote: No !Author: eidelweiss !Contact:...

justVisual 2.0 - index.php Local File Inclusion

justVisual 2.0 - index.php Local File Inclusion justVisual 2.0 index.php = LFI Vulnerability +Title: justVisual 2.0 index.php Local File Vulnerability +Version: 2.0 +License: http://www.gnu.org/copyleft/gpl.html +Download: http://fh54.de/justVisual/packages/justVisual2.zip +Risk: Medium +Local: Y...

Wild CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================== Wild CMS SQL Injection Vulnerability ==================================== ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of...

LiveChatNow SQL Injection

Title: SQL injection vulnerability in LiveChatNow Date: 20.02.2010 Author: Ariko-Security Software Link: http://www.livechatnow.com/ Version: ALL Tested on: freebsd / ubuntu ============ Ariko-Security - Advisory 4/2/2010 ============= SQL injection vulnerability in LiveChatNow Vendor's Descripti...

Joomla Jw_allVideos Remote File Download

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Joomla! Component Job - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Job Component SQL Injection Vulnerability LANGUAGE: PHP RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component com_ccnewsletter Directory Traversal Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component comccnewsletter Directory Traversal Vulnerability =================================================================== ...BEGIN ADVISORY...

Joomla Gameserver 1.2 SQL Injection

Exploit Title: Joomla comgameserver SQL Injection Vulnerability Date: 2010-01-22 Author: B-Hunt3|2 Software Link: http://joomlacode.org/gf/project/gameserver/frs/ Version: 1.2 CVE : N/A ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE:...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijackor can implement script routines & malicious codesserver-side|persistent...

T-HTB Manager 0.5 - Multiple Blind SQL Injections

T-HTB Manager 0.5 - Multiple Blind SQL Injections Salvatore "drosophila" Fresta + Application: T-HTB Manager + Version: 0.5 + Website: http://sourceforge.net/apps/mediawiki/t-htbmanager/index.php?title=MainPage + Bugs: A Multiple Blind SQL Injection + Exploitation: Remote + Date: 10 Sep 2009 +...

T-HTB Manager 0.5 Blind SQL Injection

Salvatore "drosophila" Fresta + Application: T-HTB Manager + Version: 0.5 + Website: http://sourceforge.net/apps/mediawiki/t-htbmanager/index.php?title=MainPage + Bugs: A Multiple Blind SQL Injection + Exploitation: Remote + Date: 10 Sep 2009 + Discovered by: Salvatore Fresta aka drosophila +...

Blink Blog System (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Blink Blog System + Version: Unknown + Website: http://blogink.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 03 Aug 2009 + Discovered by: Salvatore Fresta aka drosophila + Author:...

Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection

Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mail:...

LightOpenCMS 0.1 pre-alpha Remote SQL Injection

Salvatore "drosophila" Fresta + Application: LightOpenCMS + Version: 0.1 pre-alpha + Website: http://sourceforge.net/projects/lightopencms + Bugs: A Remote SQL Injection + Exploitation: Remote + Date: 05 Jun 2009 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka...