4515 matches found
The multi-mode Server-bug warning-the black bar safety net
Find the configuration file, read the web site directory under the config. asp config.php conn. asp inc directory find a high-privilege account and password For example: the root password SA password. // CH the following variables, according to the space provided of the account parameters to...
XSS in eliteCMS
Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...
Drupal Privatemsg Module Security Bypass Security Issue
No description provided by source. A security issue has been reported in the Privatemsg module for Drupal, which can be exploited by malicious users to bypass certain security restrictions. The security issue exists due to improper access permission checks in the Email Notification...
XSS in Microsoft SharePoint Server 2007
Vulnerability ID: HTB22350 Reference: http://www.htbridge.ch/advisory/xssinmicrosoftsharepointserver2007.html Product: Microsoft SharePoint Server 2007 Vendor: Microsoft Corporation Vulnerable Version: 12.0.0.6421 and Probably Prior Versions Vendor Notification: 12 April 2010 Vulnerability Type:...
XSS vulnerability in Zikula Application Framework
Vulnerability ID: HTB22349 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzikulaapplicationframework1.html Product: Zikula Application Framework Vendor: Zikula Software Foundation Vulnerable Version: 1.2.2 and Probably Prior Versions Vendor Notification: 13 April 2010 Vulnerability...
XSS vulnerability in Jaws
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Jaws which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Jaws The vulnerability exists due to input sanitation error in the "url" parameter in the "edit profile"...
Cross-site Scripting (XSS) Vulnerability in Advanced Poll
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Advanced Poll which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Advanced Poll: CVE-2010-2003 An input sanitation error was found in the "mysqlhost" parameter in...
e107 version 0.7.19 XSRF vulnerability
Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...
e107 CMS 0.7.19 - Cross-Site Request Forgery
Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...
Multiple vulnerabilities in Zikula Application Framework
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. 1 XSRF CSRF in Zikula Application Framework: CVE-2010-1732 The vulnerability...
Multiple vulnerabilities in AdaptCMS Lite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...
Satellite-X 4.0 SQL Injection / Shell Upload
======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...
Satellite-X 4.0 - Authentication Bypass
======================================================================================== | Title : Satellite-X 4.0 Auth Bypass SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Dork : 2009 © Satellite-X | Tested on: windows...
Cisco IOS SIP实现多个拒绝服务和远程代码执行漏洞
BUGTRAQ ID: 38935,38929,38933 CVE ID: CVE-2010-0579,CVE-2010-0580,CVE-2010-0581 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS Software的SIP实现中存在多个漏洞，可能允许远程攻击者导致设备重载或执行任意代码。当运行Cisco IOS Software的设备处理畸形SIP消息时可以触发这些漏洞。 在SIP运行在TCP传输的情况下，必须完成三重握手才可以利用这些漏洞。 Cisco IOS 12.4 Cisco IOS 12.3 临时解决方法：...
openSUSE Security Update : krb5 (krb5-2188)
MITKRB5-SA-2010-002: unauthenticated remote attacker could cause a GSS-API application including the Kerberos administration daemon kadmind to crash. CVE-2010-0628 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
SuSE Update for OpenOffice_org SUSE-SA:2010:017
Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
SuSE Update for OpenOffice_org SUSE-SA:2010:017
Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
SA-CONTRIB-2010-029: Keys - Cross-site Request Forgery
The Keys module provides management of various API keys. The module is vulnerable to cross-site request forgeries CSRF via the keys delete form. This would allow a malicious user to trick an admin with the "administer keys" permission into deleting keys by directing them to the url via link or...
SA-CONTRIB-2010-027: Email Input Filter - Arbitrary code execution
Email Input Filter converts email style markup into web friendly format. Arbitrary code execution vulnerability in this module allows a remote attacker with the ability to create content using an input format with the email input filter enabled to execute arbitrary PHP code on an affected system...
