phpMoneyBooks 1.0.2 Local File Inclusion

'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a null-byte attack on the 'module' GET parameter...

phpMoneyBooks 1.0.2 - Local File Inclusion

phpMoneyBooks 1.0.2 - Local File Inclusion 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...

Nakid CMS 1.0.2 - 'CKEditorFuncNum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48109/info Nakid CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

Apache CouchDB Web Administration Interface 0.8.x <= 1.0.1 XSS Vulnerability

Apache CouchDB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue

CVE-2010-3854: Apache CouchDB Cross Site Scripting Issue Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache CouchDB 0.8.0 to 1.0.1 Description: Apache CouchDB versions prior to version 1.0.2 are vulnerable to cross site scripting XSS attacks. Mitigation: All user...

Orbis CMS 1.0.2 Shell Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability CVE-2010-4313 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Orbis CMS' filemanfileupload.php script that allows any authenticated user to upload a PHP script and...

Orbis CMS 1.0.2 - Arbitrary File Upload

Orbis CMS 1.0.2 - Arbitrary File Upload 'Orbis CMS' Arbitrary Script Execution Vulnerability CVE-2010-4313 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Orbis CMS' filemanfileupload.php script that allows any...

Orbis CMS 1.0.2 - Arbitrary File Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability CVE-2010-4313 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Orbis CMS' filemanfileupload.php script that allows any authenticated user to upload a PHP script and...

Debian Security Advisory DSA 2101-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 2101-1. OpenVAS Vulnerability Test $Id: deb21011.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2101-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

OpenTTD 'NetworkSyncCommandQueue()' Denial of Service Vulnerability

This host is installed with OpenTTD and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodopenttddosvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ OpenTTD 'NetworkSyncCommandQueue' Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

Orbis CMS 1.0.2 - &#039;editor-body.php&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

FreeBSD Ports: dbus

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla! Component OnlineFlashQuiz 1.0.2 - Remote File Inclusion

/==============================================================================================================\ | | | o Online FlashQuiz 1.0.2 Remote File Inclusion Vulnerability | | | | Software : comonlineflashquiz version 1.0.2 - paid component | | Developer : www.elearningforce.biz | | Autho...

Debian Security Advisory DSA 781-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 781-1. Several problems have been discovered in Mozilla Thunderbird, the standalone mail client of the Mozilla suite. For more details, please visit the referenced security advisories. The old stable distributi...

PHP Running Management 1.0.2 - &#039;index.php&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/27268/info PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Fragile shangdu v1. 0 1 Press system-vulnerability warning-the black bar safety net

Last weekend at the forum saw a friend made a penetration shangdu official station of the post, the points go see a bit of the original is one of the official demo station of penetration. Penetration of the condition is the default password into the background, and then use the program whole and ...

CVE-2007-4626

Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service daemon crash via certain network traffic associated with entities larger than 2 Gb...

magicnews-rfixss.txt

Hello,, Magic News Plus File Inclusion And Xss Vulnerabilitis Tested on v1.0.2 Any Other Version maybe Infected Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote File Inclusion...