LinPHA <= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

No description provided by source. ?php / LinPHA = 1.3.1 newimages.php Remote Blind SQL Injection Hash Fishing Exploit / BENCHMARK method author...: EgiX mail.....: n0b0d1esathotmaildotcom link.....: http://linpha.sourceforge.net/ dork.....: LinPHA Version 1.3.x or The LinPHA developers vulnerabl...

Invision Power Board 1.x/2.0.3 SML Code Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script content. Since this could permit an...

BuzzyWall <= 1.3.1 (search.php search) SQL Injection Vulnerability

No description provided by source. BuzzyWall = 1.3.1 SQL Injection Vulnerability Author: !DoktOR! Date found: 31.08.08 Product: BuzzyWall Version: 1.3.1 Price: 40$ URL: www.buzzscripts.com Download script: http://nullstore.net/Reaper/4ptp1chdeais/BuzzyWall.v1.3.1.Nulled.rar.html Vulnerability...

CodeThatShoppingCart 1.3.1 catalog.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13560/info CodeThatShoppingCart is reportedly affected by multiple input validation vulnerabilities. These issues may allow remote attackers to carry out cross-site scripting and SQL injection attacks. An attacker may als...

mg.applanix <= 1.3.1 (apx_root_path) Remote File Include Vulnerabilities

No description provided by source. v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= mg.applanix RFI ======================================================================================= Information:-...

Bitweaver 1.x fisheye/index.php sort_mode Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Painkiller <= 1.3.1 - Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h endif define VER 0....

TigerVNC < 1.3.1 ZRLE Heap-based Buffer Overflow

According to its self-identified version number, the TigerVNC install hosted on the remote web server is affected by a heap-based buffer overflow vulnerability. A flaw exists when performing bounds check during ZRLE decoding. This could allow a remote attacker with a malicious server and a...

Telaen - Information Disclosure

Telaen - Information Disclosure source: https://www.securityfocus.com/bid/60340/info Telaen is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Versions prior to Telaen 1.3.1 are vulnerable...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers...

JVN#66596216: WikkaWiki vulnerable to cross-site scripting

WikkaWiki is an open source wiki written in PHP. WikkaWiki contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Product...

Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability

This host is running Joomla! with BF Quiz component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomcombfquiztrialsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla 'BF Quiz' Component 'catid' Parameter SQL Injection Vulnerability Authors: Madhuri D...

PHP Inventory < 1.3.2 SQLi Vulnerability

PHP Inventory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PYSEC-2011-5

The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers to trigger unauthenticated forged requests via vectors involving a DNS CNAME record and a web page...

CVE-2011-4139

Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request...

Zikula < 1.3.1 Security Bypass Vulnerability

Zikula is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Zikula Security bypass Vulnerability

This host is running Zikula and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbzikulasecbypassvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Zikula Security bypass Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...

CVE-2010-4728

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism...

OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass

Exploit for php platform in category web applications ===================================================================== OCS Inventory NG Server OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass...

OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass

OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "'...