Your Photo Store Shell Upload

======================================== Photo Store === upload shell ======================================== + Date: 30/06/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + Email: [email protected] + CategorY : Webapps/0day TYPE: PHP ×Dork "Copyright 2007 Your Photo Store...

BBMedia Design's SQL Injection

========================================================= BBMedia Design's SQL Injection Vulnerability ========================================================= Name: BBMedia Design's SQL Injection Vulnerability Date: 2010-05-23 vendor: http://www.bbmedia.org Author: Ashiyane Digital Security Tea...

Pluggable CAPTCHA

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-21359. panel CAPTCHA should be pluggable in JIRA CAPTCHA|http://en.wikipedia.org/wiki/CAPTCHA is supposed to stop spam and other automated...

Pluggable CAPTCHA

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-21359. panel CAPTCHA should be pluggable in JIRA CAPTCHA|http://en.wikipedia.org/wiki/CAPTCHA is supposed to stop spam and other automated...

Woodall Creative SQL Injection

========================================================= Woodall Creative SQL Injection Vulnerability ========================================================= Name: Woodall Creative SQL Injection Vulnerability Date: 2010-05-11 vendor: http://www.woodallcreative.com Author: Ashiyane Digital...

Joomla Rokdownloads Local File Inclusion

Joomla Component comrokdownloads Local File Inclusion ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comrokdownloads .:. Bug Type : Local File...

Joomla ACStartSeite SQL Injection

Joomla Component comacstartseite Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Bug Type : Sql InjectionMysql .:. Dork : inurl:"comacstartseite" === Exploit =...

Nabernet SQL Injection

Nabernet articles.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Bug Type : Sql InjectionMysql .:. Dork : "powered by Nabernet" === Exploit ===...

Google + reCAPTCHA Could Raise Bar in Anti-Bot, Anti-Spam Fight

Locked in a cat-and-mouse game with spammers who use bots to defeat anti-fraud mechanisms and create fake accounts, Google today announced a deal to acquire reCAPTCHA, a company that provides those squiggly words at login screens. The ReCAPTCHA deal isn’t exactly a security transaction...

CVE-2008-6690

Unspecified vulnerability in nepa-design.de Spam Protection ndantispam extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors...

CVE-2008-6690

Technical details about CVE-2008-6690 are not publicly disclosed in the provided documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from CVE sources and connected advisories.

CVE-2008-6690

Unspecified vulnerability in nepa-design.de Spam Protection ndantispam extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors...

adv94-K-159-2008.txt

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ============================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0204

Multiple cross-site scripting XSS vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0205

Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0205

Multiple cross-site request forgery CSRF vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the 1 mcspoptmsgnoanswer or 2 mcspoptmsgwronganswer parameter to...

CVE-2008-0204

CVE-2008-0204 affects the WordPress plugin Math Comment Spam Protection (versions 2.1 and earlier). The vulnerability is multiple cross-site scripting (XSS) flaws in the file math-comment-spam-protection.php, exploitable via the parameters mcsp_opt_msg_no_answer or mcsp_opt_msg_wrong_answer in wp...