CVE-2009-1264

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

The CVE concerns TYPO3 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier, where access rights were not properly verified, allowing remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Affected versions are 2.5.20 and e...

CVE-2008-6631

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

Information Disclosure in third party extension "Frontend User registration"

It has been discovered that the TYPO3 extension "Frontend User Registration" srfeuserregister is susceptible to Information Disclosure. Release Date: April 6, 2009 Component Type: Third party extension. This extension is not a part of a TYPO3 default installation. Affected Versions: 2.5.20 and al...

Yxbbs3. 0 two injection vulnerabilities-vulnerability warning-the black bar safety net

Posted:Xiaoqiang Affected version: Yxbbs3. 0 Vulnerability description: yxbbs at the time of user registration, real-time detection of whether the user name already exists and the user name is legitimate, however the service end at the time of detection, the user-submitted data validation is not...

CVE-2008-6459

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459

CVE-2008-6459 affects TYPO3’s auto BE User Registration (autobeuser) extension 0.0.2 and earlier. The issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, integrity, and availability....

[BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1

BLUE MOON SECURITY ADVISORY 2009-03 =================================== :Title: Multiple vulnerabilities in OpenSite v2.1 :Severity: Critical :Reporter: Blue Moon Consulting :Products: OpenSite v2.1 :Fixed in: to be fixed in 3.0 Description ----------- OpenSite is an Open Source Content Managemen...

Star Articles 6.0 Contents Change

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH /stararticle/user.modify.profile.php?userid=1 Add...

Star Articles 6.0 - Remote Contents Change

Star Articles 6.0 - Remote Contents Change ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH...

WorkSimple 1.2.1 RFI / Data Disclosure

START 0x01 Informations: Script : WorkSimple 1.2.1 Download : http://www.hotscripts.com/jump.php?listingid=85112&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent, Jay...

eZ Publish < 3.9.5/3.10.1/4.0.1 (token) Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation and weak activation token for new user exploit by s4avrd0w [email protected] Versions affected = 3.5.6 eZ Publish privilege escalation resolved in 3.9.5, 3.10.1, 4.0.1 More info:...

Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities

No description provided by source. Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gücleri Pst: [email protected] ============================= Dork: allinurl:clientsignup.php "classifieds" Dork2: Powered By: Living Local V1.1 Demo: http://www.jerseyads.net/listtest.php?r="scriptalert/script...

eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...

ScriptsFeed (SF) Auto Classifieds Software - Arbitrary File Upload

ScriptsFeed SF Auto Classifieds Software Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu Date: 13.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 39 my target...

XPSHOP Shopping Mall system Cookies spoofing vulnerability-vulnerability warning-the black bar safety net

Article authors: 1 2 1 7 1 1 0 9 0 Information source: evil octal information security team www.eviloctal.com） Accidentally found this loophole..official now also don't know...I'm not elsewhere in the published Oh.. This vulnerability is bad...to the straight pull change people the administrator...

Unfixed XSS vulnerability at www.oswd.org

Security researcher quangntenemy, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.oswd.org, which at the time of submission ranked 7830 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/03/2008. It is current...

MYBBS系统存在漏洞

1.用户注册功能页面没有针对无用户名注册的过滤用户注册功能页面没有针对用户名的长度的过滤用户注册功能页面没有针对无密码用户的过滤用户注册功能页面没有针对用户签名以及个人介绍的字数限制用户注册功能页面没有针对用户头像大小以及规格的限制 2.论坛版面最新回复所调用字数的限制论坛版面发表新文章的主题字数限制论坛版面发表新文章内容部分的字数限制论坛版面发表新文章针对JS的过滤 3.论坛短信功能页面没有针对发表人以及回复人的限制论坛短信功能页面对于JS恶意代码的过滤（JS代码嵌入漏洞论坛短信功能页面没有针对发表后页面的时间限制（可以导致无限制短信DOS...

Camera Life 2.6.2b4 - Arbitrary File Upload

CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability + Author:Mi4night + Version:cameralife-2.6.2b4 + Download Script: + http://sourceforge.net/project/showfiles.php?groupid=70910&packageid=70316&releaseid=628868 + Exploit: +...