Joomla Component 'com_jresearch' Local File Inclusion Vulnerability

This host is running Joomla and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlacomjresearchlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Component 'comjresearch' Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-217 June 14, 2011 -- CVE ID: CVE-2011-2109 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

7-Technologies IGSS 9 - IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)

$Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

[CVE-2011-1026] Apache Archiva Multiple CSRF vulnerabilities

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

[CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...

Apache Archiva 1.3.4 Cross Site Scripting

Hi, This is regarding multiple XSS Cross Site Scripting Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Project: Apache Archiva Severity: High Versions: 1.3.0 - 1.3.4. The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Exploit...

Apache Archiva 1.3.4 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

phpAlbum.net Multiple Vulnerabilities

phpAlbum.net is prone to Multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Installation Path Disclosure Weakness in Joomla!

High-Tech Bridge SA Security Research Lab has discovered a weakness in Joomla! which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Joomla! The weakness exists due to application reveals the full path to installation directory in...

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...

Pragyan CMS v 3.0 mutiple Vulnerabilities

Exploit for php platform in category web applications Pragyan CMS v 3.0 mutiple Vulnerabilities Author Villy and Abhishek Lyall - villys777atgmaildotcom, abhilyallatgmaildotcom Web - http://www.aslitsecurity.com/ Blog - http://bugix-security.blogspot.com http://www.aslitsecurity.blogspot.com/...

Microsoft Office Excel Axis and Art Object Parsing RCE Vulnerabilities

Microsoft Office Excel is prone to multiple remote code execution RCE vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902410. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

R7-0038: Check Point Endpoint Security Server Information Disclosure

R7-0038: Check Point Endpoint Security Server Information Disclosure February 7, 2011 -- Vulnerability Details: The Check Point Endpoint Security Server and Integrity Server products inadvertently expose a number of private directories through the web interface. These directories include the SSL...

Cambio 0.5a - Cross-Site Request Forgery

Cambio 0.5a - Cross-Site Request Forgery Vulnerability ID: HTB22768 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincambio.html Product: Cambio Vendor: Joram van den Boezem http://www.cambiocms.org/ Vulnerable Version: 0.5a nightly r37 and probably prior versions Vendor Notification: 28...

Re: hidden admin user on every HP MSA2000 G3

On Mon, 13 Dec 2010 [email protected] wrote: i just found out that there is a hidden user on every HP MSA2000 G3 SAN out there: username: admin password: !admin Confirmed on P2000 G3 fw L100R013. Please, HP, is it really necessary to give us so many different reasons to hate you?! this use...

South Korean UTW CMS Disclosure / Local File Inclusion / CSRF

Exploit Title: South Korean UTW CMS Multiple Vulnerabilities Date: 18.11.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = South Korean UTW CM...

Online Grades Multiple <= 3.2.5 LFi Vulnerabilities

Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive nformation and to execute arbitrary local scripts in the context of the...

W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion

Hello Full-Disclosure! I want to warn you about Cross-Site Scripting and Local File Inclusion vulnerabilities in W-Agora. In addition to vulnerabilities in this system which I found and disclosed in 2006 SecurityVulns ID: 6960. ------------------------- Affected products: ------------------------...

ViArt CMS 'admin_articles.php' Cross Site Scripting Vulnerability

ViArt CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-origin data disclosure via Web Workers and importScripts — Mozilla

Security researcher Yosuke Hasegawa reported that the Web Worker method importScripts can read and parse resources from other domains even when the content is not valid JavaScript. This is a violation of the same-origin policy and could be used by an attacker to steal information from other sites...