Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check

Sockso is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

sockso 1.5 - Directory Traversal

Luigi Auriemma Application: Sockso http://sockso.pu-gh.com Versions: = 1.5 Platforms: Windows, Mac, Linux Bug: directory traversal Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...

PYSEC-2011-23

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

PYSEC-2011-23

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

Wordpress Image Gallery with Slideshow plugin <= 1.5 Vulnerabilities

Exploit for php platform in category web applications Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

Lasernet CMS 1.5 SQL Injection

Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:"Powered by Lasernet" Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...

Joomla Component mod_spo SQL Injection Vulnerability

No description provided by source. Exploit Title: Simple Page Option LFI Google Dork: inurl:modspo Date: 15/07/2011 Author: SeguridadBlanca.Blogspot.com or SeguridadBlanca Software Link: http://joomlacode.org/gf/download/frsrelease/11841/47776/modspo1.5.16.zip Version: 1.5.x Tested on: Backtrack...

Design/Logic Flaw

The krb5saveccnamedone function in providers/krb5/krb5auth.c in System Security Services Daemon SSSD 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by...

Joomla! Component com_question - SQL Injection

Joomla! Component comquestion - SQL Injection |Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : |...

PlaylistMaker 1.5 - .txt Local Buffer Overflow

PlaylistMaker 1.5 - .txt Local Buffer Overflow !/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability

Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://joomla-clantools.de/downloads/docdownload/26-clantools-v15-fuer-joomla-15x.html Version: 1.5 Vulnerability 1...

Joomla 1.5 URL Redirecting Vulnerability

Exploit for php platform in category web applications ======================================== Joomla 1.5 URL Redirecting Vulnerability ======================================== Powered Joomla! 1.5 & All version Down Multiple Author: Mr.MLL Published: 2010-08-24 Verified: yes Download Exploit Code...

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection

.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blind Sql Injection .:. Dork :...

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blin...

Blog System 1.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/39406/info Blog System is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and cross-site-scripting issues. Exploiting these...

Httpdx 1.5 Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php%20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

NAS Uploader [V1.0 and 1.5] Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NAS Uploader V1.0 and 1.5 Remote File Upload Vulnerability ============================================================ | | NAS Uploader V1.0&1.5 Remote File Upload Vulnerability...

elgg 1.5 - _cssjs.php Local File Inclusion

elgg 1.5 - cssjs.php Local File Inclusion Product: elgg.org Version: dbname,$mysqldblink 48: if $simplecacheenabled || $override 49: $filename = $dataroot . 'viewssimplecache/' . md5$viewtype . $view; 51: $contents = filegetcontents$filename; 56: else 59: $contents = elggview$view;...