OpenID Warns of Serious Bugs in Some Implementations

OpenID Warns of Serious Bugs in Some Implementations Amidst the fallout of the latest bungled password service kerfuffle at LastPass, comes a warning from the OpenID foundation of a critically serious flaw in certain deployments of the product to suffer a certain level of inter-process data...

phpMyChat Plus 1.93 SQL Injection

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery Date..........4/25/2011...

phpmychat plus 1.93 - Multiple Vulnerabilities

phpmychat plus 1.93 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5...

phpmychat plus 1.93 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat/ Discovery Date..........4/25/2011...

jHTTPd 0.1a Directory Traversal Vulnerability

Exploit for multiple platform in category remote exploits ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5...

Easy File Sharing Web Server 5.8 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................Easy File Sharing Web Server Version 5.8 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

jHTTPd 0.1a Directory Traversal Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...

jHTTPd 0.1a Directory Traversal

------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery Date..........3/28/2011 Tested...

jHTTPd 0.1a - Directory Traversal

jHTTPd 0.1a - Directory Traversal ------------------------------------------------------------------------ Software................jHTTPd 0.1a Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://developer.gauner.org/jhttpd/ Discovery...

Insecure Websites The Norm, Report Finds

Web sites are chronically insecure, according to new data from security firm WhiteHat Security. White Hat’s Website Security Statisics for Winter, 2011, found that most websites were exposed to at least one serious vulnerability a day for between 9 and twelve months of last year, and that only 16...

Common Security Mistakes Can Lead to Major Compromises

SAN FRANCISCO–Security is hard and getting it right all the time is nearly impossible. But many of the mistakes that people make are simple, avoidable ones that can lead to serious intrusions and major network compromises. “Maintaining network defenses by hand is difficult,” Mike Lloyd, chief...

Anthony Scott Harrison suspended jail for capturing baking details from 2000 computers !

An Adelaide computer hacker has received a suspended jail term after infecting more than 2000 computers worldwide with a program to capture banking details. Anthony Scott Harrison, 21, used the internet to teach himself the necessary hacking and programming skills to launch his attack in 2009, bu...

Joomla Components IXXO Cart SQL injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla Components IXXO Cart SQL injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Sql injection

SQL injection vulnerability in user.php in Super Serious Stats aka superseriousstats before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information...

CVE-2009-3961

SQL injection vulnerability in user.php in Super Serious Stats aka superseriousstats before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information...

CVE-2009-3961

The CVE-2009-3961 entry describes an SQL injection in Super Serious Stats (aka superseriousstats) through user.php, exploitable via the uid parameter and related to an "incorrect regexp." The vulnerability affects versions before 1.1.2p1 and could allow remote attackers to execute arbitrary SQL c...

CVE-2009-3961

SQL injection vulnerability in user.php in Super Serious Stats aka superseriousstats before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information...

CVE-2009-3961: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in Super Serious Stats aka superseriousstats before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information...

XSS vulnerability

PMASA-2009-5 Announcement-ID: PMASA-2009-5 Date: 2009-06-30 Summary XSS vulnerability Description It was possible to conduct an XSS attack via a crafted SQL bookmark. Severity We consider this vulnerability to be serious. Affected Versions For 2.11.x: versions are not affected. For 3.x: All 3.x...

Zen Cart 1.3.8 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php ------- Zen Cart 1.3.8 Remote Code Execution http://www.zen-cart.com/ Zen Cart Ecommerce - putting the dream of server rooting within reach of anyone! A new version 1.3.8a is avaible on http://www.zen-cart.com/ BlackH : errorreportingEALL ^...