UBUNTU-CVE-2017-5664

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

Cross-site Scripting (XSS)

github.com/koding/koding is susceptible to cross-site scripting XSS attacks. It happens because encoding in static pages does not escape input string using validator.sanitize.xss...

Mini CMS 1.1 - name SQL Injection

Mini CMS 1.1 - name SQL Injection Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux...

Mini CMS 1.1 - 'name' SQL Injection

Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

SePortal 2.5 - SQL Injection Vulnerabilty

Exploit for php platform in category remote exploits SQL INJECTION Vulnerabilty code : $maintemplate = 'staticpages'; define'GETCACHES', 1; define'ROOTPATH', './'; define'GETUSERONLINE', 1; define'GETSTATSBOX', 1; includeROOTPATH.'global.php'; requireROOTPATH.'includes/sessions.php'; $sql = "SELE...

jsp vulnerabilities and solutions-vulnerability warning-the black bar safety net

Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...

PT-2006-6514

Name of the Vulnerable Software and Affected Versions: Abarcar Realty Portal affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the neid parameter to "newsdetails.php" or the slid parameter to "slistl.php"...