PHP-Nuke 7.6 Surveys Module HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13201/info PHP-Nuke is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...

Dragonfly CMS 9.0.6 .1 Surveys Module Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

[Bluelog v1.1.2] Linux Bluetooth scanner

Bluelog is a Linux Bluetooth scanner with optional daemon mode and web front-end, designed for site surveys and traffic monitoring. It's intended to be run for long periods of time in a static location to determine how many discoverable Bluetooth devices there are in the area. While there are man...

Spammers Targeting Pinterest Using Point-And-Click Tools

Spammers have jumped on the latest social media craze: the photo sharing site Pinterest. And they’re being helped out by new, automated spam toolkits designed to exploit the fast growing new social network. As Threatpost has reported, spammers have figured out ways to use Pinterest to drive traff...

Errors, Outliers Obscure Cybercrime Losses

Estimates of the extent of cyber crime are hopelessly overblown, two computer security researchers argue in an editorial from Sunday’s New York Times. Arguing counter to the prevailing opinion that online crime is a modern day Yukon Gold Rush for entrepreneurial hackers, the two Microsoft...

Microsoft Research: Cybercrime Surveys are Useless

Barely a week goes by that woeful statistics on the proliferation of cyber crime don’t make headlines in the trade and mainstream press. But a new study by Microsoft Research finds that many of those surveys are so rife with catastrophic statistical errors as to make their conclusions almost...

PHP-Nuke 8.0 (mod Surveys) SQL Injection Vulnerability

Exploit for php platform in category web applications Title : PHP-Nuke 8.0 mod Surveys SQL Injection Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote SQL Injection Tested ...

PHP-Nuke 8.0 Surveys Module SQL Injection

Title : PHP-Nuke 8.0 mod Surveys SQL Injection Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote SQL Injection Tested on : Windows XP sp3 FR Note : BAC 2011 Enchallah Me ...

W32.Yimfoca Worm Targets Facebook Users via Yahoo! Messenger

A new computer worm is denying Facebook users access to their accounts. The worm, named "W32.Yimfoca" by the security company Symantec, spreads through Yahoo! Messenger and specifically targets Facebook users. It forces them to complete surveys before they can log into their profiles. The worm...

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

Joomla JQuarks4s 1.0.0 Blind SQL Injection

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

Joomla Component JQuarks4s 1.0.0 Blind SQL Injection Vulnerability

No description provided by source. JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...

Joomla Component com_jquarks4s 1.0.0 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================================== Joomla Component comjquarks4s 1.0.0 Blind SQL Injection Vulnerability ====================================================================== JQuarks4s Joomla Component 1.0....

Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection

JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection

Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website...

MDPro Surveys Module SQL Injection Vulnerability

This host is installed with MDPro and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmdprosqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MDPro Surveys Module SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MDPro Surveys Module SQL Injection Vulnerability

MDPro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2618

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

Sql injection

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

CVE-2009-2618

CVE-2009-2618 is an SQL injection vulnerability in the MDPro Surveys Module (MDPro) 1.083.x. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php. OpenVAS entries corroborate MDPro SQLi vulnerability in this module and pro...