[CVE-ID REQUEST] vBulletin - Multiple Open Redirects

Product: vBulletin Version: 3 - 4.1.3 Release Date: 06/02/2011 Risk: Low Authentication: Not required to exploit. Remote: Yes Description: Multiple Open Redirect vulnerabilities in vBulletin version 4.1.3 and below allow remote attackers to redirect users to arbitrary web sites and conduct phishi...

prestashop vuln: sql injection

Vulnerable software and vendor Prestashop verion: 1.3.3 - 0.246s Vulnerable File Vulnerable Field category.php idcategory cart.php idproduct product.php idproduct 2. Vulnerability classification Sql Injection 3. Vulnerability details and reproduction steps, if you want to disclosure it. just...

LifeType 1.2.10 - HTTP Referer Persistent Cross-Site Scripting

Exploit Title: lifetype 1.2.10 http referer XSS Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results in a cross site scripting attack against admins or an...

whCMS 0.115 - Cross-Site Request Forgery

Vulnerability ID: HTB22767 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwhcms.html Product: whCMS Vendor: Joram van den Boezem http://whcms.burolaga.nl/ Vulnerable Version: 0.115 alpha and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF Cross-Site...

ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities

Title: ASPilot Pilot Cart 7.3 multiple vulnerabilities Date: 07.11.2010 Author: Ariko-Security Software Link: http://www.pilotcart.com Version: 7.3 CVE Reference: CVE-2008-2688 only 1 SQL injection EDB-ID: 5765 only 1 SQL injection Ariko-Security: Security Audits , Audyt bezpieczeństwa Advisory:...

Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability

====================================================================== Secunia Research 14/09/2010 - Microsoft Outlook Content Parsing Integer Underflow Vulnerability - ====================================================================== Table of Contents Affected...

Shop a la Cart Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================= Shop a la Cart Multiple Vulnerabilities ======================================= Exploit Title: Multiple vulnerabilities in SHOP A LA CART Date: 03.09.2010 Author: Ariko-Security Software Link:...

UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

UPlusFTP Server 1.7.1.01 - Authenticated HTTP Remote Buffer Overflow !/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remot...

UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

WmsCMS XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== WmsCMS XSS / SQL Injection Vulnerability ======================================== XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

Speedy-Shop 2.0 CMS Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Speedy-Shop 2.0 CMS Blind SQL Injection Vulnerability ===================================================== Vendor's Description of Software: http://www.speedy-shop.com/ Application Info:...

Pargoon CMS - Denial of Service

Pargoon CMS - Denial of Service Securitylab.ir Application Info: Name: Pargoon Vendor: http://www.vestasoft.ir Vulnerability Info: Type: DOS Risk: Medium 2010-01-17 - Found Vulnerability 2010-01-19 - Vendor notified 2010-05-08 - Public disclosure Vulnerability:...

SmartCMS v.2 SQL Injection Vulnerability

No description provided by source. Vendor's Description of Software: http://www.smartwebsites.com.cy/index.php?pageid=13&lang=en Dork: n/a Application Info: Name: SmartCMS Versions: V.2 Vulnerability Info: Type: SQL injection Vulnerability Risk: medium Fix: N/A Time Table: 22/04/2010 - Vendor...

MagnetoSoft SNTP Active-X SntpSendRequest Crash Proof Of Concept

'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notifie...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite SEH PoC 'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel (PoC)

'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download: http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe 'Vendo...

OnePC mySite Management Software SQL Injection

Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by Valentin Hoebel :: [email protected]...

MagnetoSoft NetworkResources - ActiveX NetConnectionEnum Overwrite (SEH) (PoC)

MagnetoSoft NetworkResources - ActiveX NetConnectionEnum Overwrite SEH PoC 'Magneto Software Net Resource ActiveX NetConnectionEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...