924 matches found
Design/Logic Flaw
download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...
CVE-2008-6960
The CVE-2008-6960 entry concerns X10media’s x10 Automatic Mp3 Search Engine Script (versions 1.5.5–1.6). According to the description, the vulnerability is in download.php, where an encoded url parameter allows remote attackers to read arbitrary files, demonstrated by retrieving database credenti...
CVE-2008-6960
download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...
Warn about assigning "Anyone" group in Global and Project permissions
Assigning anyone to global permissions such as a "Browse user" is a sure way to shoot yourself in the foot inadvertently. We make a vague mention of it in the documentation https://confluence.atlassian.com/display/JIRA/Managing+Global+Permissions quote if you wish to grant the permission to non...
Meta Search Engine Script (url) Local File Disclosure Vulnerability
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion
MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...
MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion
source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...
CVE-2009-2233
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...
Authentication flaw
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...
CVE-2009-2233
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awselogged cookie to 1...
AWScripts Gallery Search Engine Insecure Cookie
AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php...
AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability
Exploit for unknown platform in category web applications ================================================================= AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability ================================================================= + AWScripts.com Gallery Search Engine 1.5...
AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability
No description provided by source. + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php sebug.net...
AWScripts Gallery Search Engine 1.x - Insecure Cookie
AWScripts Gallery Search Engine 1.x - Insecure Cookie + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ----...
AWScripts Gallery Search Engine 1.x - Insecure Cookie
AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php milw0rm.com 2009-06-22...
Find Metadata
Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...
Find Metadata
Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...
Find Metadata
Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...
TRS搜索引擎代码注入漏洞
TRS 搜索引擎是TRS公司推出搭建智能化、个性化和企业级搜索引擎的优选平台。 TRS 搜索引擎在“风格设置"模块存在一处缺陷，允许恶意攻击者在页面中植入任意代码。（cookies xss） 0 WAS 4.0 + Tomcat 4.0 for Windows 暂无 --------------------------------------------------------- POST /was40/dosetstyle.jsp HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,...
MDVA-2008:081 : mandriva-kde-config
This update changes konqueror's default search-engine to ask.com, and adds Exalead.com to the search-engine list. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...