Oracle Application Server - multiple security vulnerabilities

Application: Oracle Application Server Versions Affected: Oracle Application Server 10.1.2.0.2 Vendor URL: http://oracle.com Bugs: Response Splitting XSS Exploits: YES Reported: 21.01.2009 Vendor response: 23.01.2009 Date of Public Advisory: 22.02.2012 Author: Alexandr Polyakov Description Oracle...

joomla-changepasswd.txt

Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...

GLSA-200710-13 : Ampache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-13 Ampache: Multiple vulnerabilities LT discovered that the 'match' parameter in albums.php is not properly sanitized before being processed. The Ampache development team also reported an error when handling user sessions...

Ampache: Multiple vulnerabilities

Background Ampache is a PHP-based tool for managing, updating and playing audio files via a web interface. Description LT discovered that the "match" parameter in albums.php is not properly sanitized before being processed. The Ampache development team also reported an error when handling user...

My Little Forum <= 1.7 (user.php id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get userdata": if empty$...

samba -- multiple vulnerabilities

The Samba Team reports: A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...

CVE-2006-7014

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request...

phpcms 3.0.0文件上传漏洞

漏洞文件: ads/upload.php、uppic.php require PHPCMSROOT."/class/upload.php"; if!$userid message"请您先登录或注册！" , PHPCMSPATH."member/login.php"; if$extid==1 $upfiletype= "jpg|png|gif"; elseif $extid==2 $upfiletype= "swf"; if$action=='upload' $fileArr = array 'file'=$uploadfile, 'name'=$uploadfilename,...

[KAPDA::#55] - Joomla poll component vulnerability

KAPDA New advisory Vendor: http://www.joomla.org Vulnerable: 1.0.10 prior versions also maybe Affected Bug: user session validation weakness Exploitation: Remote with browser Poc: available Description: -------------------- From vendora€™s website. Joomla! is an award-winning Content Management...

Cross-Site Scripting and Local File Inclusion in Phorum

Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...

pivot130rc2.php.txt

!/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version specific: "Powered byPivot - 1.30 RC2"...

[SA20713] CMS Faethon "mainpath" File Inclusion and Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SA18544] MyBB "Allow HTML in Signatures" Script Insertion Security Issue

TITLE: MyBB "Allow HTML in Signatures" Script Insertion Security Issue SECUNIA ADVISORY ID: SA18544 VERIFY ADVISORY: http://secunia.com/advisories/18544/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...

[SA18309] Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability

TITLE: Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18309 VERIFY ADVISORY: http://secunia.com/advisories/18309/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Next Generation Image Gallery 0.x...

CVE-2001-1513

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

DEBIAN-CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

USN-144-1: dbus vulnerability

Besides providing the global system-wide communication bus, dbus also offers per-user "session" buses which applications in an user's session can create and use to communicate with each other. Daniel Reed discovered that the default configuration of the session dbus allowed a local user to connec...

Mandrake Linux Security Advisory : dbus (MDKSA-2005:105)

Dan Reed discovered a vulnerability in the D-BUS system for sending messages between applications. He found that a user can send and listen to messages on another user's per-user session bus if they knew the address of the socket. The updated packages have been patched to correct this problem...

Low: Red Hat Security Advisory: dbus security update.

Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide message...